{"type":"bundle","id":"bundle--48a93a1d-9670-260c-1905-0000af772055","objects":[{"type":"marking-definition","spec_version":"2.1","id":"marking-definition--550e8400-e29b-41d4-a716-446655440000","created":"2026-08-23T10:12:43-04:00","definition_type":"tlp","name":"TLP:AMBER","definition":{"tlp":"amber"}},{"type":"indicator","spec_version":"2.1","id":"indicator--201dad11-117c-42cc-955b-0000913d22b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar","pattern":"[url:value = 'http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5802b-8c2a-05e4-2e4a-00000d545225","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/sserv.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/sserv.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6007b6-1d1a-8a66-6ab0-000037563039","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/ssj.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/ssj.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6eb3ba0-0416-a234-b7ff-00002664ccd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ff/22/6NkpoT2I_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ff/22/6NkpoT2I_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fe8fd6-ee07-a4ba-ef62-00009b6c57e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/86/e2/nuFlPuWf_o.png","pattern":"[url:value = 'https://images2.imgbox.com/86/e2/nuFlPuWf_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdab68b9-7652-bc63-096c-0000d2d91b33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ce/60/RW99SPa3_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ce/60/RW99SPa3_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa9ef7-6251-e75b-2145-00009d3ccd96","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png","pattern":"[url:value = 'https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2639638-c9fa-036a-c1a6-00002daeec1a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png","pattern":"[url:value = 'https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fefca66-2d38-a910-b47d-0000b98c321e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/.i","pattern":"[url:value = 'http://185.12.78.161:36220/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fbf8b2-346f-45e7-2cf6-0000c4a62f45","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/.i","pattern":"[url:value = 'http://36.66.139.36:53736/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5433dc85-05ab-99df-bfdb-000081d57794","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg","pattern":"[url:value = 'http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c135933e-d4f7-a9cd-cb32-0000d65c900f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","pattern":"[url:value = 'http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b219180b-0d6c-6ee8-3a9c-00001e539a64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://mysura.it/njtzac0.tar","pattern":"[url:value = 'https://mysura.it/njtzac0.tar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886d6c15-6994-5781-490d-000014d01df3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/.i","pattern":"[url:value = 'http://94.231.164.10:6432/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792cda41-2ba1-7c73-564e-0000cc21e356","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://191.33.171.242:55443/.i","pattern":"[url:value = 'http://191.33.171.242:55443/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8c1675-e1a9-258f-d7bc-00005eda9513","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/converting.php","pattern":"[url:value = 'https://deagroup-ks.com/converting.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5093700e-2693-265f-34ea-0000b8d1d3fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/approx.php","pattern":"[url:value = 'https://deagroup-ks.com/approx.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182314e-4555-2092-afa4-00004b9900bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.m","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68347d65-e2c0-482f-066a-0000014fbf03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.a","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfbf6cd-0f43-aac0-704a-000005882dce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/whiz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/whiz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfae7477-d89a-a3d3-8a36-0000dff509d9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unexplainable.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unexplainable.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f7366-1ed8-3082-3046-000017efe582","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unthinkably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unthinkably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6575e8-1071-2b49-0fec-00003c17dcec","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/conditioner.php","pattern":"[url:value = 'https://kramersmarionnettes.com/conditioner.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f13a0f-0f80-097e-1dc4-000010391e62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/frustrating.php","pattern":"[url:value = 'https://kramersmarionnettes.com/frustrating.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57840397-f16c-2fb7-ded7-0000cdd2ff76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/designer.php","pattern":"[url:value = 'https://kramersmarionnettes.com/designer.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdfbcf9-34f3-d045-4246-0000107f234f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/fizz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/fizz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26190b8e-754e-a6c6-e48a-000098420209","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/antienuretic.php","pattern":"[url:value = 'https://kramersmarionnettes.com/antienuretic.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4269f8d9-d3b2-8ccc-b907-00009e25f91a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/redesign.php","pattern":"[url:value = 'https://kramersmarionnettes.com/redesign.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fd863-66ff-6ec3-26be-00005cd7420f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/intermission.php","pattern":"[url:value = 'https://kramersmarionnettes.com/intermission.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0872cd-78da-bc9e-484b-00007ed3d370","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/roughness.php","pattern":"[url:value = 'https://kramersmarionnettes.com/roughness.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a93dc87-4c38-5b92-f6f6-00005487000c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/actionably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/actionably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb8cf42-2313-3ed4-6597-00000eb0ec82","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php","pattern":"[url:value = 'https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7ec4c-8690-1c9e-8bb4-0000678aca0c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.219.38.228:23053/.i","pattern":"[url:value = 'http://178.219.38.228:23053/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afee4b9f-4e87-14d2-8545-00005606e37d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://twu-hwt.org/scarica/","pattern":"[url:value = 'https://twu-hwt.org/scarica/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40a875d-1d64-954c-2f51-000004051f0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://jawaratekno.com/rid/rid.js","pattern":"[url:value = 'https://jawaratekno.com/rid/rid.js']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eaa0918-e841-a811-e0e7-000001824687","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/.i","pattern":"[url:value = 'http://181.49.47.190:46516/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbda7665-4fdf-593b-88ec-0000a509a964","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.129.177.162:26290/.i","pattern":"[url:value = 'http://181.129.177.162:26290/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f7b1e-1102-0cd5-900a-000098634600","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://friendsofsclarc.org/pEp/per.zip","pattern":"[url:value = 'http://friendsofsclarc.org/pEp/per.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33fbdc6d-bea3-2899-ac5b-0000b39bbc69","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0f53fa-c993-1c46-ad5b-00004d0ca0b2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae0d0f3-ba57-1270-6b11-000062c6afaa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c745e3b-afae-8afc-2966-0000af188a1c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ce3e4-a98b-bac9-0257-0000cbc0520d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2755c99-cd9f-608b-5679-000030d55188","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e22f-e13a-875c-685d-0000c7294077","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cfbbdc-3cc2-fc9b-8887-00007c0f212c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac0437-cd6b-4b82-c283-00006e5e9cce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8870cb3-72c5-ff82-dc29-0000ec075cd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b48270-ef64-bc14-09ca-0000653ea04b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf94755-b5f3-875b-f470-0000e5583a43","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be226e-2f9e-519c-5e1d-00003d547b5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e645b4-0fb9-65d8-b684-0000f246ef89","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff1d279-b145-fb4a-7c34-0000d6e27389","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e65d34-d984-3a38-acc7-000091686c8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/i386","pattern":"[url:value = 'http://75.119.134.80/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea3f824-22b2-2f68-d8f5-00005888324b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/armv7l","pattern":"[url:value = 'http://75.119.134.80/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da1712-6e61-8aa8-a7c7-000088518d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1566150-7d29-bc1c-c905-00006624c598","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e244df38-a6ea-09f1-ec62-0000a91fad3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1c1421-da64-59de-ac9c-0000f756e26c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50435d-3985-edbd-048d-0000202db525","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38cb9ba-efee-aff7-d191-0000edb6e431","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6529fef-970d-f81c-ba19-0000257474e8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://2.57.122.121/ping","pattern":"[url:value = 'http://2.57.122.121/ping']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea798067-9f76-0100-ef13-0000abb4c932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Mozi.a","pattern":"[url:value = 'http://81.16.123.55:41567/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4081af0-1a18-5bd7-e3cc-0000ff444473","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm5","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d014b4a-7352-178a-3c57-0000edf1eb9d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm6","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930f2a66-31ab-0f9d-c283-000047f82316","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b487ef0a-7a44-2b74-cc54-000053db396c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.sh4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec673c93-50b6-aa81-b37e-0000ab06ceef","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.x86","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66071de2-02c8-b3fd-f20d-00003f18b8b9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/i","pattern":"[url:value = 'http://98.103.171.36:19021/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14280d6b-7291-b6d3-7915-000030efb7cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/i","pattern":"[url:value = 'http://103.90.207.234:55903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163b4358-19d2-8aa4-7d5c-0000fc86cf52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/i","pattern":"[url:value = 'http://91.92.82.180:17789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d368b2-778f-0c38-7577-000080520dd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/i","pattern":"[url:value = 'http://213.6.74.138:39286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f8b23f-79cc-8ae9-d5ae-0000bed451e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/i","pattern":"[url:value = 'http://93.123.169.160:27058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726f021e-0208-04eb-7ebc-00000df5d5ed","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/i","pattern":"[url:value = 'http://190.113.124.155:64726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1adce486-ded1-4f44-f55f-0000a4b98a91","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/i","pattern":"[url:value = 'http://186.154.93.81:8125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5330578c-9448-5c6f-da44-0000cf7a5c26","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/i","pattern":"[url:value = 'http://103.245.10.51:56156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a843ceb-5c12-b58e-fa21-0000c8e74463","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.101.83:1609/i","pattern":"[url:value = 'http://213.6.101.83:1609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49129a4-d8bd-4500-83ff-0000e9498cdf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.84.212.18:20781/i","pattern":"[url:value = 'http://154.84.212.18:20781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790ba65e-2950-4540-0fc6-0000fddb848a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/i","pattern":"[url:value = 'http://103.227.118.45:56789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17942180-95d8-47a3-9deb-00006ebe1c87","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/i","pattern":"[url:value = 'http://36.66.139.36:53736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d2ef8c-33ce-4b5e-4c55-0000ad62fbf8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/i","pattern":"[url:value = 'http://37.57.33.51:49049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6df56-1a15-65b1-bc60-0000a552c87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/i","pattern":"[url:value = 'http://94.251.5.51:31559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28abe6f-f7e4-eca6-20d9-0000c0d62079","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/i","pattern":"[url:value = 'http://36.88.180.115:20043/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9322b204-9c13-47a0-b299-0000f0ec603f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/i","pattern":"[url:value = 'http://181.49.47.190:46516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46457c30-acfd-6fee-93b4-00005521239d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/i","pattern":"[url:value = 'http://185.71.69.198:34190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff91e3d1-7b9a-f6ce-424e-00008a6619ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/i","pattern":"[url:value = 'http://109.108.84.121:28531/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5776503c-2c79-ef03-126f-0000dadad050","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/i","pattern":"[url:value = 'http://41.77.74.90:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e26fe9-7448-1bc9-1744-0000fe245a2d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/i","pattern":"[url:value = 'http://103.187.151.107:1500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45262dd7-2310-940c-3023-00008e97b94c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.151.56.42:28186/i","pattern":"[url:value = 'http://46.151.56.42:28186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc57a8c-0628-577a-fc7d-000022870062","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/i","pattern":"[url:value = 'http://89.216.100.166:30359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e457a4-0b45-0764-f575-0000789a5d62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/i","pattern":"[url:value = 'http://94.231.164.10:6432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931fd70-4b6b-2b92-b833-0000504bb22d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/i","pattern":"[url:value = 'http://77.89.245.118:44811/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbcecd6-be8a-f99f-e935-00004d6e4f20","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/i","pattern":"[url:value = 'http://212.73.75.84:60761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccefcaf3-ae4d-1315-ec72-0000425448c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3a88fc-07bf-8714-2a6f-00007dfe04a0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/i","pattern":"[url:value = 'http://82.114.200.50:48416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff16f034-f92e-7cce-07cb-0000377c5cf1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/i","pattern":"[url:value = 'http://78.26.180.129:37261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a27a98-c26e-26b4-ccb2-0000ea7eff28","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://58.145.168.170:25222/i","pattern":"[url:value = 'http://58.145.168.170:25222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcb37aa-7c3d-e23d-bed2-0000bc2826e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/i","pattern":"[url:value = 'http://138.122.43.76:56486/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c6cdaa-0e5c-b7b7-920d-00002cca53cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/i","pattern":"[url:value = 'http://124.194.46.204:44528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd932ef-4910-84de-dffe-000044b7ec4d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/i","pattern":"[url:value = 'http://37.252.66.188:12165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6931023-622f-b1b1-b60c-0000edb96d4e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/i","pattern":"[url:value = 'http://190.2.237.104:65088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8af92c-faba-ae3c-3416-00000d32ca6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/i","pattern":"[url:value = 'http://167.250.193.253:19901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e22ef5b-5320-c479-6ec2-000098192aa6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/i","pattern":"[url:value = 'http://200.61.163.235:27538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2836c14f-a56d-1d21-65af-000092ebfced","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.193.59.78:39941/i","pattern":"[url:value = 'http://181.193.59.78:39941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad3fd6-da35-cbfc-f530-00008dcbf97f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.78.201.3:62330/i","pattern":"[url:value = 'http://202.78.201.3:62330/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece8278-54f3-d958-46f4-0000dbfd6956","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.114:10702/i","pattern":"[url:value = 'http://154.0.129.114:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f31d1b-e358-e3af-3bb3-00003fddc615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://149.255.10.46:32625/i","pattern":"[url:value = 'http://149.255.10.46:32625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3b0c8c-3fa8-6394-ad2e-000001e70109","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/i","pattern":"[url:value = 'http://178.188.30.171:14759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e341958-b1af-d45b-fdbc-00002c6d6715","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/i","pattern":"[url:value = 'http://178.151.143.2:21623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d0cddb-3122-6d17-0ad1-00008d2de45c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/i","pattern":"[url:value = 'http://181.211.252.34:1808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8dc6000-9536-ec66-6b6f-00001eeeb04e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/i","pattern":"[url:value = 'http://188.72.6.218:43597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd19386-62ea-c812-5ed4-0000ba7619bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/i","pattern":"[url:value = 'http://185.236.46.120:45209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c236341-4121-9c56-62b6-00006999eb33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/i","pattern":"[url:value = 'http://202.148.20.138:24291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ae47f6-2bda-9246-ea2d-0000cb691d25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/i","pattern":"[url:value = 'http://200.69.219.25:6584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c1414e-1aa8-11be-5886-00008b73697f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/i","pattern":"[url:value = 'http://202.148.18.218:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36af24be-07b5-576b-355d-00008c37c95d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/.i","pattern":"[url:value = 'http://212.73.75.84:60761/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55bd325-14ac-8a76-ee29-00009c5cdfc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.92.68.241:27066/.i","pattern":"[url:value = 'http://36.92.68.241:27066/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd311bb4-79c4-fd9d-df93-0000cec9d87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/.i","pattern":"[url:value = 'http://178.188.30.171:14759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0948af72-6d53-990d-d85b-0000f29b901d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/.i","pattern":"[url:value = 'http://77.89.245.118:44811/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db82bdad-efaa-6246-e718-0000770bb9bf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/.i","pattern":"[url:value = 'http://94.251.5.51:31559/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7969b318-3c60-c17b-d16d-00001dc59398","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.122.211.138:31644/.i","pattern":"[url:value = 'http://200.122.211.138:31644/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781f0df6-6629-0184-0919-00007d99390c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/.i","pattern":"[url:value = 'http://78.26.180.129:37261/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa6e72-e504-f579-13e1-00006e7ef520","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/.i","pattern":"[url:value = 'http://138.122.43.76:56486/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30312057-f3e5-8bae-95f0-000059df5933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.92.143.90:65469/.i","pattern":"[url:value = 'http://109.92.143.90:65469/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222096f4-bfde-a33f-8e5a-00005ace93d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.190.20.228:46441/.i","pattern":"[url:value = 'http://185.190.20.228:46441/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f687df6f-1b7d-f1a6-25d8-0000c2810616","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/.i","pattern":"[url:value = 'http://81.16.242.236:28115/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83207f6e-7347-6c92-1c10-000025f6e6f6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/.i","pattern":"[url:value = 'http://103.90.207.234:55903/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d331835-acf4-dd80-ee51-0000eb1d9bc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/.i","pattern":"[url:value = 'http://185.236.46.120:45209/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57922d43-f7c0-5d07-2ecb-0000b881dee7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://79.175.42.206:7773/.i","pattern":"[url:value = 'http://79.175.42.206:7773/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8494265-107b-5916-3609-00007725981e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/.i","pattern":"[url:value = 'http://202.148.18.218:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed146b0c-7658-08d6-74b2-000061bfda36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/.i","pattern":"[url:value = 'http://82.114.200.50:48416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a329bdd2-0c44-2ce8-4eff-000069a2ecca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/.i","pattern":"[url:value = 'http://190.113.124.155:64726/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280e7169-26c6-3cc7-224e-000062ecd099","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/.i","pattern":"[url:value = 'http://81.16.123.55:41567/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427c6490-23e8-b23d-4f59-000051476ea8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/.i","pattern":"[url:value = 'http://202.148.18.220:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f54d4d-1cb6-6dab-258d-000004346cb6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://193.106.58.174:32789/.i","pattern":"[url:value = 'http://193.106.58.174:32789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaee7b-4d40-6df1-83a5-000031470703","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/.i","pattern":"[url:value = 'http://213.6.74.138:39286/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb9a63-4798-9c07-1cf2-000039ff4900","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/.i","pattern":"[url:value = 'http://185.71.69.198:34190/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c24f7-bc96-fb4d-41a7-00004cac1e73","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/.i","pattern":"[url:value = 'http://202.5.50.108:15808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1729f853-3f15-7507-cef8-0000045b2689","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/.i","pattern":"[url:value = 'http://118.71.250.6:28411/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc50dd1-8f15-faae-8667-0000269d5220","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/.i","pattern":"[url:value = 'http://190.2.237.104:65088/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d04e731-7451-d4e6-f430-0000c78d6b16","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.140.32.219:12617/.i","pattern":"[url:value = 'http://78.140.32.219:12617/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b291d19d-d0e2-bfa0-c50f-00001e963933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.170.119.100:1863/.i","pattern":"[url:value = 'http://95.170.119.100:1863/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf20d36-3083-34f7-d9b7-0000328d31cd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/.i","pattern":"[url:value = 'http://91.92.82.180:17789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0910ef-20d1-3781-7e55-000065d6787b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/.i","pattern":"[url:value = 'http://103.245.10.51:56156/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a13422-1b40-f9c9-1486-0000d544b7e1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/.i","pattern":"[url:value = 'http://181.211.252.34:1808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd31e5c2-70c9-fe97-e6ff-0000148a00ae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/.i","pattern":"[url:value = 'http://89.216.100.166:30359/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8684bc2-8133-3118-0b02-000036b978cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/.i","pattern":"[url:value = 'http://95.158.175.214:23270/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ec33d3-fb54-ecaf-737a-0000266e05fd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/.i","pattern":"[url:value = 'http://188.72.6.218:43597/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--766ce564-781a-2205-ef93-0000dca50cfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/.i","pattern":"[url:value = 'http://41.77.74.90:10702/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc33a3c-f4d5-399a-040b-0000fec314c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/.i","pattern":"[url:value = 'http://93.123.169.160:27058/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f3bdd6-c350-5266-521e-000008ad7f27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/.i","pattern":"[url:value = 'http://202.148.20.138:24291/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4e16dd-90fa-afcb-057a-0000fcdb3a80","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/.i","pattern":"[url:value = 'http://200.69.219.25:6584/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ec968-6384-8db1-aa31-0000bf3d0d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/.i","pattern":"[url:value = 'http://37.252.66.188:12165/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5b4349-2633-dbb8-5cd4-0000acd067c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.69/curl","pattern":"[url:value = 'http://66.71.242.69/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a231935-39da-4772-e9bf-0000efb1baa5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.70/curl","pattern":"[url:value = 'http://66.71.242.70/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500790ec-73f2-8a77-e368-0000bbab7383","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.68/curl","pattern":"[url:value = 'http://66.71.242.68/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1512239-4c70-ecfa-052a-00006412bc52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.67/curl","pattern":"[url:value = 'http://66.71.242.67/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffcadef-2238-9066-4e23-0000f96aae5f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/i","pattern":"[url:value = 'http://190.145.205.178:6360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f12239-9079-8dc7-8d8b-0000b2c41fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/i","pattern":"[url:value = 'http://212.107.232.167:21838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f301f-5d3b-3f59-126c-0000da29cb8a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/i","pattern":"[url:value = 'http://116.58.51.90:1162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6e7a5e-f17b-54c3-e55d-0000ed8e9bfc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/i","pattern":"[url:value = 'http://109.245.220.229:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d6b634-fcb1-8101-ed4a-00000a3b76ca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/i","pattern":"[url:value = 'http://151.236.247.230:19193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2790a190-3702-5aaa-5734-00004e76e395","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/i","pattern":"[url:value = 'http://202.148.5.34:35700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fae81a6-46e8-fc87-a961-00003a754306","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.155:59323/.i","pattern":"[url:value = 'http://182.253.115.155:59323/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ee236-7548-0c60-5ece-0000b2d8e357","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.249.96:46703/.i","pattern":"[url:value = 'http://81.16.249.96:46703/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7817cdb0-b7c9-58f4-974e-0000ccaf9702","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/.i","pattern":"[url:value = 'http://151.236.247.230:19193/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97cec56-ad2e-5b2e-7091-0000373f96f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/.i","pattern":"[url:value = 'http://202.148.5.34:35700/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2923628-c4b7-5d73-4ae7-000055353139","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/.i","pattern":"[url:value = 'http://109.87.223.241:39478/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e99699-86dd-3b73-f6ca-0000f879b197","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/.i","pattern":"[url:value = 'http://212.107.232.167:21838/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c7ad76-3620-fa47-411b-0000baa3c42f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/.i","pattern":"[url:value = 'http://116.58.51.90:1162/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691eecf7-a2d7-e43e-6601-00004c39a111","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/.i","pattern":"[url:value = 'http://190.145.205.178:6360/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54cfd3a-4866-b502-1d45-000003f2b776","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/.i","pattern":"[url:value = 'http://109.245.220.229:44759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49dd828-1e6d-c10e-08b1-00000577f2ac","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/.i","pattern":"[url:value = 'http://88.116.62.226:52714/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc92216-297b-1f4c-7cb3-0000a9d7a677","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/.i","pattern":"[url:value = 'http://89.231.14.137:2282/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9530ce-4393-317b-a6a9-00003064af66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1123/sshd","pattern":"[url:value = 'http://68.226.36.150:1123/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f052ddec-487d-6520-743a-0000e57de710","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1109/sshd","pattern":"[url:value = 'http://174.71.237.86:1109/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36375b21-62b8-6e5d-9ae7-00002c0b48df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.45:8088/sshd","pattern":"[url:value = 'http://102.68.74.45:8088/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447f759e-c0b3-d629-8617-00009109310e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.222.113.214:49012/sshd","pattern":"[url:value = 'http://31.222.113.214:49012/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a089775-1abb-a5d2-c43e-000096977bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50003/sshd","pattern":"[url:value = 'http://91.164.39.142:50003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270da7cd-1bef-b272-2ee7-0000f2f61609","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50004/sshd","pattern":"[url:value = 'http://91.164.39.142:50004/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec517468-9f6b-3487-c634-0000e58d024a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50005/sshd","pattern":"[url:value = 'http://91.164.39.142:50005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ab1445-e8ad-bbc4-80cd-0000ed8da7e0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://112.4.110.42:37782/sshd","pattern":"[url:value = 'http://112.4.110.42:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c8f38-825a-bd48-d1b9-00006ba3399d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37782/sshd","pattern":"[url:value = 'http://223.108.58.15:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec9f666-79ba-b503-9bfa-00001872ce6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8027/sshd","pattern":"[url:value = 'http://165.73.108.6:8027/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c9fe8a-46c3-1b2a-dded-000070536d8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1103/sshd","pattern":"[url:value = 'http://174.71.237.86:1103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b856650-a518-8481-ac55-000036bfd0ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.250.54.75:84/sshd","pattern":"[url:value = 'http://46.250.54.75:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be963f59-7596-fecb-d907-0000d6a94c62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.14.38.66:1081/sshd","pattern":"[url:value = 'http://80.14.38.66:1081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558b470-ebe0-94c6-a51a-0000459e9f61","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8023/sshd","pattern":"[url:value = 'http://165.73.108.6:8023/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a890157b-cca6-ea9d-994f-00006b68b7e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8021/sshd","pattern":"[url:value = 'http://165.73.108.6:8021/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b312ad8-ff67-69d5-0d5e-00004959ed6f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.13:37782/sshd","pattern":"[url:value = 'http://223.108.58.13:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688b0624-fa0c-031c-e4ef-0000e70256d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1112/sshd","pattern":"[url:value = 'http://24.234.159.5:1112/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4765cc-4174-1668-0786-00009cf16144","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.93.103.10:51080/sshd","pattern":"[url:value = 'http://212.93.103.10:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41e8d1-d923-faea-4b5a-0000ef411287","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:83/sshd","pattern":"[url:value = 'http://178.176.204.250:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c015f81-196b-70a2-59a4-00005ea54508","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1101/sshd","pattern":"[url:value = 'http://174.71.237.86:1101/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac506c6-6d53-5783-8a21-0000dc003e8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50006/sshd","pattern":"[url:value = 'http://91.164.39.142:50006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c0b7-f716-2fab-3f90-000044963dfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.0.241.65:8082/sshd","pattern":"[url:value = 'http://31.0.241.65:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3539cf6e-f123-c9d5-759c-0000a558e038","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9114/sshd","pattern":"[url:value = 'http://118.69.157.212:9114/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7284a433-1066-22fb-275c-0000f2e520c1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.170.32.148:84/sshd","pattern":"[url:value = 'http://188.170.32.148:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9ab9f6-9c5e-1fb1-389c-000060e225ea","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://144.6.87.144:2400/sshd","pattern":"[url:value = 'http://144.6.87.144:2400/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15444d0-8ed9-ec39-11e7-000081ec6f83","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50002/sshd","pattern":"[url:value = 'http://91.164.39.142:50002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cf67b6-b772-152d-b7c8-000014c2e51d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50008/sshd","pattern":"[url:value = 'http://91.164.39.142:50008/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36407d6d-5b63-b007-9ad5-000058345bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.173.70.100:86/sshd","pattern":"[url:value = 'http://31.173.70.100:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c39716-d10a-fe05-fb70-0000d0b015ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8029/sshd","pattern":"[url:value = 'http://165.73.108.6:8029/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f45edd-d9f4-1c04-8cd3-0000efcfa577","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9111/sshd","pattern":"[url:value = 'http://118.69.157.212:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ccc6de-b15d-5224-9da1-00007c13a3a4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8020/sshd","pattern":"[url:value = 'http://165.73.108.6:8020/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3301576d-5452-380d-835a-00003684e6eb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8025/sshd","pattern":"[url:value = 'http://165.73.108.6:8025/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c9e36b-55b1-c2d1-f820-0000271fbb25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1122/sshd","pattern":"[url:value = 'http://68.226.36.150:1122/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ed0141-129d-4c55-4c31-0000428e0dad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.2.229.122:8003/sshd","pattern":"[url:value = 'http://185.2.229.122:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0728db53-bbae-cbae-2da3-0000cdf5616e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9219/sshd","pattern":"[url:value = 'http://118.69.157.212:9219/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0467d5-e56b-bb37-e195-000052e58b22","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8022/sshd","pattern":"[url:value = 'http://165.73.108.6:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e934023d-09ce-9fa1-007d-0000cb47a5b3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.148.194.54:9013/sshd","pattern":"[url:value = 'http://82.148.194.54:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc372318-2e17-60a3-1066-0000e05765d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.66.30.68:9013/sshd","pattern":"[url:value = 'http://92.66.30.68:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c029bfea-5ac5-4c60-5a60-000071ec3a03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002//sshd","pattern":"[url:value = 'http://188.147.175.138:5002//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed47f6bf-ccd6-3ad3-31c0-0000902a6e66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:84//sshd","pattern":"[url:value = 'http://178.176.204.250:84//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a778760-cccf-ab9d-7ee2-0000060264a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8085/sshd","pattern":"[url:value = 'http://76.53.38.126:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32921bb3-c1c4-3160-2e5e-000084593c27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10005/sshd","pattern":"[url:value = 'http://123.143.141.75:10005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77bf266b-3eb2-3ae9-4b81-000028f44c21","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8087/sshd","pattern":"[url:value = 'http://76.53.38.126:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ff9d24-f57a-d667-9ae8-000022dfb07a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8086/sshd","pattern":"[url:value = 'http://81.42.247.62:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550c8f0b-d6ce-4b8f-9b98-00004d8e62b5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8888/sshd","pattern":"[url:value = 'http://76.53.38.126:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce3f5ce-a09d-b77a-4837-00003f8f5862","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8086/sshd","pattern":"[url:value = 'http://76.53.38.126:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9edbf052-3142-f726-b8a5-00009ef3550f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://141.134.214.217:8003/sshd","pattern":"[url:value = 'http://141.134.214.217:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac33f4a7-e464-cd1e-52c4-0000e7414b48","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.230.215.65/sshd","pattern":"[url:value = 'http://95.230.215.65/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de2057b-dacd-7838-eb87-00009fa1b593","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.82.83.143:8888/sshd","pattern":"[url:value = 'http://223.82.83.143:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46bef8a-29a7-dce0-f882-00001b528cbf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8085/sshd","pattern":"[url:value = 'http://81.42.247.62:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62320c97-8b63-540d-f2e7-00006848f535","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8083/sshd","pattern":"[url:value = 'http://81.42.247.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2772b7d8-6148-41d9-d333-00006263096e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8082/sshd","pattern":"[url:value = 'http://76.53.38.126:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a34e81-fb85-2468-db49-000035a4a439","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8087/sshd","pattern":"[url:value = 'http://81.42.247.62:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d76571a-56e6-ecf6-c635-0000a95b7c0f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8057/sshd","pattern":"[url:value = 'http://80.24.87.77:8057/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b67057-d67b-14d1-74ee-000090b81267","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8080/sshd","pattern":"[url:value = 'http://178.183.208.134:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f373c2f-a0c3-eb53-3256-00000c2998fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8084/sshd","pattern":"[url:value = 'http://81.42.247.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123ad67b-5cf4-6147-4956-0000bdbc7926","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://132.255.192.122:9001/sshd","pattern":"[url:value = 'http://132.255.192.122:9001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78eaa3f2-1be8-de4a-b303-000087c30624","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8081/sshd","pattern":"[url:value = 'http://178.183.208.134:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde20096-a59c-78a9-593b-000043ec0205","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002/sshd","pattern":"[url:value = 'http://188.147.175.138:5002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96edf32-d211-55bc-5924-00007f33e176","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8082/sshd","pattern":"[url:value = 'http://81.42.247.62:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a84bf-412d-8c99-871e-0000be20684c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8056/sshd","pattern":"[url:value = 'http://80.24.87.77:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f748a-d2e2-38de-2cbe-0000de8f6a11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1111/sshd","pattern":"[url:value = 'http://24.234.159.5:1111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fade35-6b5f-0ffb-e17c-000094059105","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.216.105.81/sshd","pattern":"[url:value = 'http://102.216.105.81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1928c7-d8bc-4256-1946-000059a0c3da","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:50080/sshd","pattern":"[url:value = 'http://212.3.211.157:50080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569add76-d5f7-d658-c7d7-000080469012","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.77.57.16:8585/sshd","pattern":"[url:value = 'http://82.77.57.16:8585/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c42e33-962a-bfa7-d1d9-00004555111b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37780/sshd","pattern":"[url:value = 'http://223.108.58.15:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b406691d-f4c5-34b7-3820-0000bdd400e2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10006/sshd","pattern":"[url:value = 'http://123.143.141.75:10006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf20095-210a-8aee-2ef5-00005c1dac9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://221.10.233.217:8618/sshd","pattern":"[url:value = 'http://221.10.233.217:8618/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9909bfa6-5ca9-b06c-729f-000033026e36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1393e0d-e740-9f84-b3fe-0000e26e4559","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://170.210.81.104/tftp","pattern":"[url:value = 'http://170.210.81.104/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e47cd1-4265-a8c2-2c05-00005cd00ad0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.57.39.2:19001/tftp","pattern":"[url:value = 'http://202.57.39.2:19001/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47f4f30-93be-bb25-0ac7-000067469fbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.108.63.242/tftp","pattern":"[url:value = 'http://190.108.63.242/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4406037d-1b53-0340-3e26-00006a11481f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.72.167.124/tftp","pattern":"[url:value = 'http://182.72.167.124/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01688c2a-a352-cc33-0526-000015f3b8b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.224.107.4:8580/tftp","pattern":"[url:value = 'http://185.224.107.4:8580/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12c14d8-e69a-3e50-7b23-00006b9a9a71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.184.185.198:4443/tftp","pattern":"[url:value = 'http://89.184.185.198:4443/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c38f2b-0add-9a75-b018-00007e18fb11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://45.118.79.103:8892/tftp","pattern":"[url:value = 'http://45.118.79.103:8892/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4b679c-7768-e373-a308-0000cbcd61d8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d50b85-c975-abab-777e-000006c56352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://down.ftp21.cc/TQ.jpg","pattern":"[url:value = 'http://down.ftp21.cc/TQ.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe5e032-17a8-b8a6-145e-00005d8791f0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.175.101.203/02.08.2022.exe","pattern":"[url:value = 'http://85.175.101.203/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5055372-f7e1-df2d-f364-000042ff033d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips","pattern":"[url:value = 'http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a1ae5ee-16a8-fdeb-5140-0000896146dd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f899a86-428c-f708-368e-00000e047b97","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l","pattern":"[url:value = 'http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9449f7c3-78d0-7b64-43c0-00003362e36d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d06d68-3890-f062-1d3e-0000e43218fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ca59f1-30d1-e710-e03e-000050b89103","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc","pattern":"[url:value = 'http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509e529c-7bd6-3870-a8e8-00009f4585ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l","pattern":"[url:value = 'http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d630c78d-592a-3eac-e974-0000bff9bc8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k","pattern":"[url:value = 'http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8752dd32-c83e-996f-d198-0000626aff5d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53630681-9c0b-a29b-ff39-00009660a32e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49da0564-25dd-8d16-0d3c-0000a0d9e994","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l","pattern":"[url:value = 'http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d02a06-2e24-fccb-559d-0000194327c5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64","pattern":"[url:value = 'http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568971f3-45ad-0a22-5e2a-0000e1b4fb42","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin","pattern":"[url:value = 'http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103c748f-0684-ba1c-0dc8-00007a23d976","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1562f475-27ce-eb2e-7a73-00007520cbcd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc","pattern":"[url:value = 'http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--402a2b52-c394-4a8e-43a3-000036858b8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586","pattern":"[url:value = 'http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7979937f-3ae6-9ed4-94a3-0000d86e7afb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2954ce42-8966-ca6e-fa40-0000be177304","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0305393b-c6a9-f0fc-277a-0000a2a636e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d65cda-377c-e7f9-77bd-00000dd69032","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bb0667-d738-4d84-f2bb-0000b3075539","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.121.250.206:8080/tftp","pattern":"[url:value = 'http://89.121.250.206:8080/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329858d5-4c30-bd94-08c0-0000f3827e6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:81/tftp","pattern":"[url:value = 'http://93.182.76.169:81/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c2a7b-73e3-d91e-2f19-0000ca0f42a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:82/tftp","pattern":"[url:value = 'http://93.182.76.169:82/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01acabc2-4274-ca34-23a8-0000f4ce8d60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.104.213.45:6004/tftp","pattern":"[url:value = 'http://190.104.213.45:6004/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e216cea-89ca-2634-93a5-0000d5222413","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://103.54.153.49/XClient.exe","pattern":"[url:value = 'https://103.54.153.49/XClient.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ef6dd-838c-da60-e260-000024761b76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://soft.wsyhn.com/soft/wnbsqv3008.exe","pattern":"[url:value = 'https://soft.wsyhn.com/soft/wnbsqv3008.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcaf34b6-3225-c4e5-96e9-0000c8e68a5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.166.211.222:6202/sshd","pattern":"[url:value = 'http://109.166.211.222:6202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5f2567-b1c5-df2f-ba43-0000aac90484","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.69:8055/sshd","pattern":"[url:value = 'http://102.68.74.69:8055/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bcabc9-8232-ad0a-262c-0000e52c7297","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/i","pattern":"[url:value = 'http://178.211.135.170:12768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6b7cd8-9e90-4ec4-c5c2-00002e06afa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://83.218.189.21:5195/i","pattern":"[url:value = 'http://83.218.189.21:5195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5a8c80-bc74-ef7a-015e-000009cb315c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/i","pattern":"[url:value = 'http://202.105.196.30:52286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7208653-d9dc-4c33-6895-0000cc3bcaf5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.238.209.82:26331/i","pattern":"[url:value = 'http://77.238.209.82:26331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bc404b-eb42-238c-c99f-0000ba1797ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/i","pattern":"[url:value = 'http://77.46.170.18:53326/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b4bb80-918f-41f2-2d37-0000de7e5eb9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/i","pattern":"[url:value = 'http://88.116.62.226:52714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e71873-4b33-add0-379e-00001eb47c95","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/i","pattern":"[url:value = 'http://206.214.35.106:20647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975576b2-3557-a8de-c786-000050c8144c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/i","pattern":"[url:value = 'http://184.185.30.182:29029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5844c9-9fb5-b73b-d400-00009badbba8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.91.236.237:10713/i","pattern":"[url:value = 'http://213.91.236.237:10713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad21f1f-cb0f-2504-aca3-0000468b1caf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/i","pattern":"[url:value = 'http://41.78.75.186:30763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88e3eab-238e-3aac-e46f-00006a9e42ad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.131.234.26:51118/i","pattern":"[url:value = 'http://202.131.234.26:51118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8054de7-5aa3-46ad-43ae-00006d664694","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/i","pattern":"[url:value = 'http://212.98.186.8:6819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ba3536-47f0-6660-aa28-00005d154451","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/i","pattern":"[url:value = 'http://109.160.87.2:31378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9d16f2-7e20-9122-7dfa-0000d010b864","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/i","pattern":"[url:value = 'http://88.135.26.83:32710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c8e76-e496-7714-e1a0-00002e659813","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/i","pattern":"[url:value = 'http://78.26.81.99:58230/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8f739-a33d-0681-ace6-00005c3cc7f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/i","pattern":"[url:value = 'http://176.221.111.222:2282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73be984d-caab-53bf-d11d-00001975c5d7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.57.69.125:16138/i","pattern":"[url:value = 'http://185.57.69.125:16138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11f4abc-be68-4447-a505-0000bface811","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/i","pattern":"[url:value = 'http://203.160.56.67:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75b3810-0a1f-4cb7-004b-00000376d2fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/Mozi.m","pattern":"[url:value = 'http://103.187.151.107:1500/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad9a08d-563d-de2d-5aaf-00004c931bae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/Mozi.m","pattern":"[url:value = 'http://184.185.30.182:29029/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282116d3-7eb6-1d10-189c-00002b486b66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://121.43.104.75:8080/help.scr","pattern":"[url:value = 'http://121.43.104.75:8080/help.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865de2ec-83dc-f329-44b9-00002d1cd0cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/Mozi.m","pattern":"[url:value = 'http://212.98.186.8:6819/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f993840-3ca9-c842-44e5-00001aa05ffa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/Mozi.m","pattern":"[url:value = 'http://91.92.82.180:17789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2776ee12-e2cd-6249-447c-0000924f38fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/Mozi.m","pattern":"[url:value = 'http://103.227.118.45:56789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f450b0-59d4-28fd-fe4b-00003143d07c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/Mozi.m","pattern":"[url:value = 'http://78.26.81.99:58230/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31519ed3-2239-a0c5-9ce7-000088170800","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/Mozi.m","pattern":"[url:value = 'http://41.78.75.186:30763/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0c184c-3b71-cb1a-205a-0000065be514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/Mozi.m","pattern":"[url:value = 'http://36.66.139.36:53736/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c7d2c7-2756-6431-c5f3-0000d6983514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/Mozi.m","pattern":"[url:value = 'http://203.160.56.67:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52325864-a0a6-05e6-44eb-0000011da0dc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/Mozi.m","pattern":"[url:value = 'http://176.221.111.222:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f57fde3-b9da-dfd6-be58-00000bcf70df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/Mozi.m","pattern":"[url:value = 'http://77.46.170.18:53326/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3461dc1-21bb-33a6-6af3-000004c83193","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/Mozi.m","pattern":"[url:value = 'http://213.6.74.138:39286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49024309-9f03-ae0d-d96a-0000cefd0382","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.160.102.188:16079/Mozi.m","pattern":"[url:value = 'http://182.160.102.188:16079/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9541f4-697b-02e3-cad0-00002fbc8742","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/Mozi.m","pattern":"[url:value = 'http://185.236.46.120:45209/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90061387-2e84-b593-686a-00009880ac9c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.218:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f296e91-86db-4152-0fd8-0000b16b4903","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/Mozi.m","pattern":"[url:value = 'http://200.61.163.235:27538/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ac1ab3-8ff0-694f-e64f-00005c231017","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/Mozi.m","pattern":"[url:value = 'http://178.151.143.2:21623/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e4613c-da15-7ce7-c169-000002862515","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/Mozi.m","pattern":"[url:value = 'http://88.135.26.83:32710/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc4cdd0-55ef-dc14-2dda-00009ba2dfb8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/Mozi.m","pattern":"[url:value = 'http://178.211.135.170:12768/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51b934d-d6c6-d059-e440-00005c3d4bbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/Mozi.m","pattern":"[url:value = 'http://88.116.62.226:52714/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181d644f-feeb-c26e-7048-0000ed274d31","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://183.81.156.121:12929/Mozi.m","pattern":"[url:value = 'http://183.81.156.121:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a7716b-3881-2e66-c6ee-0000ce621fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/Mozi.m","pattern":"[url:value = 'http://41.77.74.90:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc66d73-5077-4d69-03e7-00000095e1b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.134:10702/Mozi.m","pattern":"[url:value = 'http://154.0.129.134:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e683f2b-ba63-6ef9-47df-0000dbd92f67","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/Mozi.m","pattern":"[url:value = 'http://81.16.242.236:28115/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b63845-d162-ad41-bc88-0000b7baa063","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/Mozi.m","pattern":"[url:value = 'http://89.231.14.137:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f851ed-6a20-e9d0-07ff-0000458a100f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/Mozi.m","pattern":"[url:value = 'http://186.154.93.81:8125/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc723566-c071-0c7b-deea-0000a4162066","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/Mozi.m","pattern":"[url:value = 'http://98.103.171.36:19021/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dede90b8-a940-88a3-b785-00002f119f11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/Mozi.m","pattern":"[url:value = 'http://109.160.87.2:31378/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e3e35a-525e-8abd-0a43-0000d90dfd54","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.203.50:40889/Mozi.m","pattern":"[url:value = 'http://118.179.203.50:40889/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0aae09-5285-43ed-c2e1-00002bf606f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/Mozi.m","pattern":"[url:value = 'http://178.188.30.171:14759/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89a3c9f-57d6-8dfb-43a0-00006110b93e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/Mozi.m","pattern":"[url:value = 'http://95.158.175.214:23270/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb086f25-dd01-21ec-f85e-0000264e3e14","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.217.215.238:17645/Mozi.m","pattern":"[url:value = 'http://103.217.215.238:17645/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c8ba2d-7236-d888-7e57-00004f769c3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/Mozi.m","pattern":"[url:value = 'http://185.12.78.161:36220/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352eb645-d47a-9544-01b1-0000ec6e0e41","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/Mozi.m","pattern":"[url:value = 'http://109.87.223.241:39478/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517e5541-7344-bec8-8822-0000f55f5722","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/Mozi.m","pattern":"[url:value = 'http://138.122.43.76:56486/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594a79cd-4a51-2439-812d-000005f52ad5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/Mozi.m","pattern":"[url:value = 'http://206.214.35.106:20647/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda69d25-9704-0d2f-75e0-000031aa3392","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/Mozi.m","pattern":"[url:value = 'http://181.211.252.34:1808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7c1368-3f4a-ef09-aea7-00008aeea37c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/Mozi.m","pattern":"[url:value = 'http://202.148.20.138:24291/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1309d001-df71-64b1-fc4e-00000d505231","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.121.235:1123/Mozi.m","pattern":"[url:value = 'http://118.179.121.235:1123/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098afc35-0d5f-a651-87d2-000063b2a653","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/Mozi.m","pattern":"[url:value = 'http://77.89.245.118:44811/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e85aab3-9191-9a30-76ac-0000fa542615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/Mozi.m","pattern":"[url:value = 'http://103.90.207.234:55903/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac5c972-58ae-30d0-189a-00005235a352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/Mozi.m","pattern":"[url:value = 'http://37.57.33.51:49049/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e658a7a-6855-a3ea-9d35-000051a44d70","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://195.34.91.22:61437/Mozi.m","pattern":"[url:value = 'http://195.34.91.22:61437/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f882049-0c7a-5082-8939-0000fddadc1e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.255.217.87:32902/Mozi.m","pattern":"[url:value = 'http://37.255.217.87:32902/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a6823e-d3eb-e35f-738f-0000ec837131","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/Mozi.m","pattern":"[url:value = 'http://190.113.124.155:64726/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fed1-b9a2-f260-7110-00006dbd32c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.156:59323/Mozi.m","pattern":"[url:value = 'http://182.253.115.156:59323/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33e87e4-21b8-c45d-2e79-0000ef3e2e56","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/Mozi.m","pattern":"[url:value = 'http://202.5.50.108:15808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22267c8-25e0-67ec-35f3-000094163e60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.220:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a30630-7982-825e-6cc8-0000c998f53c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/Mozi.m","pattern":"[url:value = 'http://124.194.46.204:44528/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a39fb9-0aab-fd24-3c96-000087ffe4af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/Mozi.m","pattern":"[url:value = 'http://181.49.47.190:46516/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1e6bde-f8dd-3760-92f8-00000f67d265","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/Mozi.m","pattern":"[url:value = 'http://118.71.250.6:28411/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95c0690-531c-40dc-fba9-00003de247ce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/Mozi.m","pattern":"[url:value = 'http://36.88.180.115:20043/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72d1747-f4ea-1a18-3a01-0000c1ff06af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/Mozi.m","pattern":"[url:value = 'http://167.250.193.253:19901/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d7aed8-f973-6d74-91f5-00005fdff707","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/Mozi.m","pattern":"[url:value = 'http://94.251.5.51:31559/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255763b5-b617-c949-d1e8-00008c3c8543","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/Mozi.m","pattern":"[url:value = 'http://109.108.84.121:28531/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1f3f98-bbd0-6273-67f1-0000d2a08b64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/Mozi.m","pattern":"[url:value = 'http://202.105.196.30:52286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a4ff9d-a485-241a-ffe5-00004322f46e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/Mozi.m","pattern":"[url:value = 'http://37.252.66.188:12165/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa3726d-182f-58df-3ad7-0000e6aff4f4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.212.35.175:8081/sshd","pattern":"[url:value = 'http://118.212.35.175:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e071eb-65b4-9213-854a-0000c7efd002","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:85/sshd","pattern":"[url:value = 'http://178.183.205.197:85/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7c26-90c6-7478-6f33-0000da5825a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://14.161.6.225:8888/sshd","pattern":"[url:value = 'http://14.161.6.225:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0f3e32-0bc3-315e-e806-000002e372a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10062/sshd","pattern":"[url:value = 'http://81.45.183.125:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd783586-d123-a62b-5b51-0000ed211999","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10072/sshd","pattern":"[url:value = 'http://81.45.183.125:10072/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05aba1c-a1d9-100c-f5b7-000074dee1d2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.43.16.137:8093/sshd","pattern":"[url:value = 'http://185.43.16.137:8093/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef130b2d-bd2b-9f31-3ffc-0000a3a908e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10097/sshd","pattern":"[url:value = 'http://213.96.13.100:10097/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccb3265-dd43-b253-ca9f-00005bac03c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8085/sshd","pattern":"[url:value = 'http://87.97.161.106:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea800426-ec5f-5831-5026-000041623932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8083/sshd","pattern":"[url:value = 'http://89.35.233.220:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92d178-c9d1-f111-f491-000028b67a4a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8083/sshd","pattern":"[url:value = 'http://87.97.161.106:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0e1caa-199f-aa66-69f1-00002156ed9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.203.169.41/sshd","pattern":"[url:value = 'http://92.203.169.41/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f40cb-2231-ae88-0e11-000062213f05","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8086/sshd","pattern":"[url:value = 'http://87.97.161.106:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409983ca-1d24-2a72-8b56-0000f133b610","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.28.228.106:9014/sshd","pattern":"[url:value = 'http://80.28.228.106:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c147688-a3d3-e673-a743-000078ef05f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8080/sshd","pattern":"[url:value = 'http://89.35.233.220:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6afd433-be6b-0b25-2da6-00007166a0c3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.191.89.122:1591/sshd","pattern":"[url:value = 'http://185.191.89.122:1591/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dcd783-6b00-58c9-1260-000056192d71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8082/sshd","pattern":"[url:value = 'http://89.35.233.220:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11900a4-a640-43b9-0d64-00004e6c1863","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.130.160.219:37783/sshd","pattern":"[url:value = 'http://85.130.160.219:37783/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4740345-c473-3295-a89c-0000fe62ecc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:86/sshd","pattern":"[url:value = 'http://178.183.205.197:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69877983-dbbc-04d5-9dc9-00009a243422","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10094/sshd","pattern":"[url:value = 'http://213.96.13.100:10094/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b27f13e-6941-176d-28ef-0000722ee898","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://166.147.146.187:8044/sshd","pattern":"[url:value = 'http://166.147.146.187:8044/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2132dc-234a-b07e-6776-0000d1fccd0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.217.114:1026/sshd","pattern":"[url:value = 'http://109.207.217.114:1026/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc623c84-4ce5-df51-8b8d-0000c2058fb5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:51080/sshd","pattern":"[url:value = 'http://212.3.211.157:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4346c2c7-381c-726b-0a42-000006e59441","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.216.197:1031/sshd","pattern":"[url:value = 'http://109.207.216.197:1031/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19ef30a-94a5-2110-500e-0000d1c7cc84","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://data.yhydl.com:20006/file/XW_Setup.exe","pattern":"[url:value = 'http://data.yhydl.com:20006/file/XW_Setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc24820-a19a-2385-da04-000081f16504","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/x.rar","pattern":"[url:value = 'http://119.192.128.163:28080/docs/x.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f86c17-9d84-4857-a676-00009731ae0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/solr.sh","pattern":"[url:value = 'http://119.192.128.163:28080/docs/solr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18041886-d0b0-678e-550d-000094b87ec4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.152.219.150:8182/tftp","pattern":"[url:value = 'http://185.152.219.150:8182/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab940d12-4a19-386a-2eb7-0000a9181b0b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.247.218.186:49052/i","pattern":"[url:value = 'http://103.247.218.186:49052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f65b6c-4779-aaa1-6480-0000b82aa4dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://154.73.64.24:41934/i","pattern":"[url:value = 'http://154.73.64.24:41934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa716c34-7a4e-9c78-e759-0000395e6d19","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.171.188.254:17418/i","pattern":"[url:value = 'http://181.171.188.254:17418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44895c92-502f-c4b5-247c-0000888b00a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.255.216.26:25260/i","pattern":"[url:value = 'http://43.255.216.26:25260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01aea97b-7aab-882d-c847-0000e2794b51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://159.250.122.151:8081/Photo.scr","pattern":"[url:value = 'http://159.250.122.151:8081/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dc7012-d0c3-62fa-ceb9-00004b8ed5b1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.ppc","pattern":"[url:value = 'http://103.163.119.220/Aqua.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a24f8c-2c8a-c9eb-2d08-000053603646","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.arm5","pattern":"[url:value = 'http://103.163.119.220/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c019-7efa-b589-40c8-000097704d94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE","pattern":"[url:value = 'http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f22b35-7979-caa1-ed56-0000f3150c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.x86_64","pattern":"[url:value = 'http://103.163.119.220/Aqua.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6acf74-e95c-f102-1ad0-0000468bc689","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.dbg","pattern":"[url:value = 'http://103.163.119.220/Aqua.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac71dec-92bf-426e-d2f7-0000aee257cf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.85.166.12:22448/.i","pattern":"[url:value = 'http://212.85.166.12:22448/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99304d82-7e1b-b284-07f8-000075c98b3d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/.i","pattern":"[url:value = 'http://93.87.31.84:40955/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7688ded-3586-317b-d30c-0000980809e6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/.i","pattern":"[url:value = 'http://89.216.107.99:65414/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031524f2-0b94-00a9-11d7-0000de03e75e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/.i","pattern":"[url:value = 'http://216.155.92.203:3956/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48c3ea9-2aae-bc07-f68a-00008714f7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/.i","pattern":"[url:value = 'http://47.49.114.179:27254/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9d45b6-608c-03a5-4042-0000361593cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://186.138.107.5:14491/.i","pattern":"[url:value = 'http://186.138.107.5:14491/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f8dbb6-aa08-5c9b-5cb8-0000e40fa191","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mpsl","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71553755-a392-e40c-810e-00001507accb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm6","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85c66ef-623a-7141-6dde-000007b20325","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm5","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22a1d7f-0dd5-8650-d47f-00008f0ccfdb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mips","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065207c3-387b-5a1d-b855-0000adbbcbae","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm7","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7add5d8-5b4e-c455-7c3d-000023c4cffe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.mips","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c471893-f4c2-b98d-016c-000061800f01","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a42d9e51-25f4-dc2e-92b4-00003315fa6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.ppc","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d5cf64-99b5-40e6-08ca-00000173cb8b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm7","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddbae48-de21-77e3-4ac9-0000ab7a0300","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm5","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899faf9f-46c1-dbfc-9cce-00004b169419","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.x86","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65ae12-e9ab-9133-643c-0000e688365b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O","pattern":"[url:value = 'https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9a8b54-910e-08cc-0b08-0000576ef8c5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.73.75.82:33920/i","pattern":"[url:value = 'http://212.73.75.82:33920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dece9c7f-27d9-23b3-79d8-00000af340bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/i","pattern":"[url:value = 'http://93.87.31.84:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e88b94-ddc4-923a-38d8-000078ca7ea1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8051/sshd","pattern":"[url:value = 'http://195.34.102.234:8051/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7cdde8e-1a01-1fb4-db1d-0000e5b3256f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.88.189:802/sshd","pattern":"[url:value = 'http://2.54.88.189:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8009109-2155-8b1c-0986-000093fdc5a2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8061/sshd","pattern":"[url:value = 'http://195.34.102.234:8061/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edbb2c-989a-3844-a7a8-00001cab1368","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8056/sshd","pattern":"[url:value = 'http://195.34.102.234:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c42ac-a9d7-b20c-4d9b-00008486d1e1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8060/sshd","pattern":"[url:value = 'http://195.34.102.234:8060/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69ae403-9783-e3a3-6397-0000dcf8b7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30460/sshd","pattern":"[url:value = 'http://117.240.155.245:30460/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d294ea-b786-0849-6cf5-00002df3ec7e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30490/sshd","pattern":"[url:value = 'http://117.240.155.245:30490/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5c010-c2f9-7c85-c7f4-0000d5131789","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30420/sshd","pattern":"[url:value = 'http://117.240.155.245:30420/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b2779d-15bf-c128-7d04-000044ac539c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.247.101.63:2000/sshd","pattern":"[url:value = 'http://117.247.101.63:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733dda8d-fad0-3d05-4d58-00003e24ac8a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30410/sshd","pattern":"[url:value = 'http://117.240.155.245:30410/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a59f5e-0e67-bcd5-3e91-0000c2318740","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30480/sshd","pattern":"[url:value = 'http://117.240.155.245:30480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec609647-2ed7-82ee-e4b9-0000eb0a92c3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30380/sshd","pattern":"[url:value = 'http://117.240.155.245:30380/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f8d394-9268-0350-17ff-0000171fb909","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30310/sshd","pattern":"[url:value = 'http://117.240.155.245:30310/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411df719-d3b5-81de-fec1-0000df7ac6b3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30250/sshd","pattern":"[url:value = 'http://117.240.155.245:30250/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a35ce74-e66c-a358-d553-0000a444bbcb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30120/sshd","pattern":"[url:value = 'http://117.240.155.245:30120/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a2cba4-4c14-72e0-8b87-00003ad17cb7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30430/sshd","pattern":"[url:value = 'http://117.240.155.245:30430/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee67c2bd-d83f-6023-d53e-000013ea6934","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30330/sshd","pattern":"[url:value = 'http://117.240.155.245:30330/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e5fb4e-684f-d5fd-d92b-0000a95acb8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30140/sshd","pattern":"[url:value = 'http://117.240.155.245:30140/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c440df58-2fd0-3a51-62af-0000e6a5a222","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://111.74.21.155:5011/sshd","pattern":"[url:value = 'http://111.74.21.155:5011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa6b585-5ac9-1a82-0eba-0000b58fc0ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/i","pattern":"[url:value = 'http://47.49.114.179:27254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cf6e58-0d28-d727-4bc5-0000667ca3a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.93.83.124:11028/i","pattern":"[url:value = 'http://182.93.83.124:11028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828da79d-54f7-14ea-7f7f-000073f2bb3c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/i","pattern":"[url:value = 'http://89.216.107.99:65414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c902843d-d33d-6aae-f244-000069240fc7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.244.113.217:53408/i","pattern":"[url:value = 'http://94.244.113.217:53408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c3b92c-34bd-6729-632a-0000f24b7cd4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14.0.204.188/sshd","pattern":"[url:value = 'http://14.0.204.188/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40abc838-e4f2-18da-b9a5-00009c29d6e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.142.63.8:24860/i","pattern":"[url:value = 'http://94.142.63.8:24860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22481751-baa3-86d8-0439-0000e48c4c3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-64bit.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-64bit.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ec8f00-ce11-c479-4b03-0000e1d16f3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-arm.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-arm.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7c314-aab4-af24-4b88-000017398d69","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1192/sshd","pattern":"[url:value = 'http://62.56.225.99:1192/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8b10b1-2903-a47a-e9c6-00000042992a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1193/sshd","pattern":"[url:value = 'http://62.56.225.99:1193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5388d9-26af-5945-b034-000077165962","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png","pattern":"[url:value = 'https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f9244-0345-8af6-39ca-00006b43b55f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.20.19.72:8009/sshd","pattern":"[url:value = 'http://185.20.19.72:8009/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561d0cf8-7645-e133-3700-000080124445","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.215.129.223/sshd","pattern":"[url:value = 'http://117.215.129.223/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ff8213-c19a-e371-bbdb-0000cea14d52","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9011/sshd","pattern":"[url:value = 'http://92.66.30.68:9011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13213a0-0891-d684-9fc6-00008436081d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9014/sshd","pattern":"[url:value = 'http://92.66.30.68:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6ec005-b5b9-f478-ab87-0000934d1c5e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9015/sshd","pattern":"[url:value = 'http://92.66.30.68:9015/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913cc96c-602f-70b0-4258-000080ec67fb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:28888/sshd","pattern":"[url:value = 'http://182.109.0.22:28888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4cb1d9-1c00-73fa-f6bc-0000f49ad91e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10014/sshd","pattern":"[url:value = 'http://80.11.36.4:10014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab53d6a-bfc6-5398-65bd-000060d5044f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.58:37379/i","pattern":"[url:value = 'http://222.165.237.58:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44145afe-d758-3a76-c05c-000011a27a93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/i","pattern":"[url:value = 'http://216.155.92.203:3956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdce2929-fb9b-bc4d-09ab-0000fb704820","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.59:37379/i","pattern":"[url:value = 'http://222.165.237.59:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5a2471-fc35-4ad3-8213-0000db131e7f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.60:37379/i","pattern":"[url:value = 'http://222.165.237.60:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac0cf7-01fa-0d6d-936a-0000372880e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.62:37379/i","pattern":"[url:value = 'http://222.165.237.62:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0b726f-c266-0d08-9c10-00003d260b35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:18888/sshd","pattern":"[url:value = 'http://182.109.0.22:18888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0eded6-39c1-c16a-a019-00008571c994","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8081/sshd","pattern":"[url:value = 'http://178.183.70.63:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c67fdd-7ea9-6dca-4dff-0000ab87e112","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8083/sshd","pattern":"[url:value = 'http://178.183.70.63:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59f9cc0-0b7d-12a4-02ac-0000d89d9898","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8085/sshd","pattern":"[url:value = 'http://178.183.70.63:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23067311-d5ff-951a-f21e-000004e303ca","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://46.175.139.20:11074/i","pattern":"[url:value = 'http://46.175.139.20:11074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3068efac-d9ef-74e6-e12f-0000be9be7d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.159.221.33:9269/i","pattern":"[url:value = 'http://103.159.221.33:9269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38313782-dcf6-3ec7-943e-0000d71e2a76","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.22:65481/i","pattern":"[url:value = 'http://114.31.8.22:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c8644b-e580-edeb-d83e-00001c97c34b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://twitch.tj/","pattern":"[url:value = 'https://twitch.tj/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8e71a2-451f-0d22-4320-000012ae2a0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10018/sshd","pattern":"[url:value = 'http://80.11.36.4:10018/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2682e06-2692-e09d-8cc9-0000b895d9e8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/armv7l","pattern":"[url:value = 'http://198.166.72.242/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2157227c-12f3-2100-16be-0000fb2056cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/arm7","pattern":"[url:value = 'http://198.166.72.242/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de6ddbb-d249-c1bd-4a8e-00004082a87d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/aarch64","pattern":"[url:value = 'http://198.166.72.242/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389ba5d5-8085-244d-c99b-0000cb99b02d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/libmod_hellocpp_42.so","pattern":"[url:value = 'http://47.89.173.214:8888/libmod_hellocpp_42.so']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b209fd3f-a5cf-332a-f4b3-0000038fc0e5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/asdf","pattern":"[url:value = 'http://47.89.173.214:8888/asdf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0705c69f-4ae0-0976-4cf7-0000eff33e23","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/ffff","pattern":"[url:value = 'http://47.89.173.214:8888/ffff']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f356af5-4c4a-a470-b407-00008ed8b314","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/xxxx","pattern":"[url:value = 'http://47.89.173.214:8888/xxxx']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b3a50b-0d8c-ffb6-cb23-0000793b008d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048b71b7-2885-f2a4-147e-00007829bf20","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mipsle","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e348a7cf-6555-9a84-4169-0000f7c477bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9d7885-18db-c609-eeda-00007ad080e9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm8x64_be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm8x64_be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea98aa-dae6-93f2-b782-0000d9de967a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.42.154:40955/i","pattern":"[url:value = 'http://93.87.42.154:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f001759c-7c06-76ab-0e2f-00002530b9ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64le","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83b5657-d129-9d9f-e44f-0000c06f6e95","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://95.62.202.150:10071/sshd","pattern":"[url:value = 'http://95.62.202.150:10071/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f72e4b0-86fe-27de-aea4-0000b5319d29","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.89.62.19:63814/i","pattern":"[url:value = 'http://36.89.62.19:63814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b182f2-969e-569c-32b3-0000f7e59b94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://112.4.110.28:37780/sshd","pattern":"[url:value = 'http://112.4.110.28:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2f7c9-e6a8-5759-aee0-000062460c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64len32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64len32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cf0fbd-6367-c60e-9083-0000b5b3ebb4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2e57f4-d52c-e28c-c6e5-00006f975845","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64e6500","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ecf2fa-a747-3226-b55d-0000c3139ed5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv4","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe293d6-4331-2a3b-8bdd-0000691a565e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv6","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bc06a4-890d-b26b-8e40-0000be8ae80a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38135356-de69-9301-1dfb-0000896f58dd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl1001","pattern":"[url:value = 'http://31.170.22.205/dl1001']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102fccb-e872-ef92-3125-00003f8bf3a3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca79925b-b027-48b2-2e81-0000fe31a535","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d02598-cf72-6c2f-3979-00006956ae24","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64lepower8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64lepower8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5620b9-6893-af59-81b7-0000297550ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64power8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64power8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ab0e4f-438b-c0e2-0df3-00005037d889","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.riscv32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.riscv32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5a340-7316-8ffc-72d8-0000d1a6313b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60da79-beb7-25d0-e64d-000099335a77","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arcle750d","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arcle750d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a433bb-393d-964b-2c94-000018ad567f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.i686","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e807a-9c5f-6298-acdf-00001a404c75","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpce500mc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpce500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf94eab-ead9-6980-a346-00008bc0df10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64n32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64n32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b19f5dd-3b60-50ed-40a3-00007c875e6e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl18","pattern":"[url:value = 'http://31.170.22.205/dl18']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0bb4fb-60a0-1825-bb42-00005a9c6b14","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mips","pattern":"[url:value = 'http://160.187.146.122/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f327802d-f533-bf66-fa91-00005a6abdce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/m68k","pattern":"[url:value = 'http://160.187.146.122/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb9fbda-f504-aacc-8c30-0000319dc6cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/spc","pattern":"[url:value = 'http://160.187.146.122/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c749ed1-a751-6c30-5a5e-0000c0970804","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm6","pattern":"[url:value = 'http://160.187.146.122/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24d744d-d14c-5c18-0b52-0000cf0ada10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/x86","pattern":"[url:value = 'http://160.187.146.122/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfff4583-6517-88f2-bb43-0000b709b465","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/ppc","pattern":"[url:value = 'http://160.187.146.122/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad97232-d07a-6682-f266-0000319f055e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mpsl","pattern":"[url:value = 'http://160.187.146.122/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857dcf6b-b143-a4e8-c471-0000d222a7ea","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm5","pattern":"[url:value = 'http://160.187.146.122/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beef2e2c-0bd7-20a0-5c9e-0000fe930c51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl20","pattern":"[url:value = 'http://31.170.22.205/dl20']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b49c2a2-5c1e-520e-1e5a-0000d84680d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/c.sh","pattern":"[url:value = 'http://160.187.146.122/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5432026a-d673-86c3-9e88-00004bd7380e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/w.sh","pattern":"[url:value = 'http://160.187.146.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ecdf4f-9399-62b7-58c7-000020acf817","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.64.14.250:38834/i","pattern":"[url:value = 'http://36.64.14.250:38834/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8100335d-3d37-947f-7c0d-000064799dfc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://82.102.74.238:36868/i","pattern":"[url:value = 'http://82.102.74.238:36868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7f6e19-2932-ed4c-d445-0000dc45f7bf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.210.214.48:9814/i","pattern":"[url:value = 'http://178.210.214.48:9814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa55ad-e68d-3268-0ad8-0000d41968fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.43.17.123:8083/sshd","pattern":"[url:value = 'http://185.43.17.123:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c1b7d9-7ae0-4db4-dc7e-000031c981b8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.60.216.19:65020/i","pattern":"[url:value = 'http://179.60.216.19:65020/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fff2597-4358-da5c-00be-0000c9dbd4ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.60.246.15:16794/i","pattern":"[url:value = 'http://181.60.246.15:16794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e674ff66-bc43-cd3a-004e-00007c60ba8d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.57.122.121/mig","pattern":"[url:value = 'http://2.57.122.121/mig']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d8058e-f9d6-9e47-0eff-0000eaa2ddc5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/ns3.jpg","pattern":"[url:value = 'http://162.215.218.82/ns3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2792de92-f63b-b323-9e18-00000b5b33ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.229.20.42:2874/i","pattern":"[url:value = 'http://43.229.20.42:2874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8874502-a764-f003-361f-000009203ccb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.160.116.52:57196/i","pattern":"[url:value = 'http://182.160.116.52:57196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2bddb2-f585-b4e6-684b-0000aa862d0e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.182.77.20:86/tftp","pattern":"[url:value = 'http://93.182.77.20:86/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1886ff-e687-dde6-5416-0000345bd673","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.136.63.232:92/tftp","pattern":"[url:value = 'http://2.136.63.232:92/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50aaf8d7-d735-defe-bf0c-000096d64708","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://61.244.254.110:37903/tftp","pattern":"[url:value = 'http://61.244.254.110:37903/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46d839-e254-9c0c-3803-000009923019","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.63.168.2:8082/tftp","pattern":"[url:value = 'http://179.63.168.2:8082/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db72d22-3216-0f10-dc93-0000ba90abdd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.226.241.197:5003/tftp","pattern":"[url:value = 'http://77.226.241.197:5003/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b2125e-22f6-034c-22a0-0000cfcfe446","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://188.243.36.33:8082/sshd","pattern":"[url:value = 'http://188.243.36.33:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a807d3e3-09da-2a0f-2019-00006ba32880","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/oto","pattern":"[url:value = 'http://162.215.218.82/oto']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1cf29d-1c5e-1cc1-71fc-00003336b193","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://213.47.243.57:48784/i","pattern":"[url:value = 'http://213.47.243.57:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613fa6b1-a526-dce2-596c-00007ed1e7ba","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://139.162.53.175:685/Mozi.m","pattern":"[url:value = 'http://139.162.53.175:685/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef77204a-df03-1902-ca10-0000d29e8d6a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.110.37.104:48784/i","pattern":"[url:value = 'http://80.110.37.104:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f63296-b4d4-f50e-1d25-0000b44682cd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/debug.dbg","pattern":"[url:value = 'http://160.187.146.122/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab0d13a-0288-e064-4290-00008ec862a0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://37.252.69.10:58829/i","pattern":"[url:value = 'http://37.252.69.10:58829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943584c7-88bb-2cc7-f84c-000069ca5c93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.57.30.25:7580/sshd","pattern":"[url:value = 'http://85.57.30.25:7580/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef77aa0-90a6-76ec-2598-0000db07eee3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://78.36.11.185:1080/sshd","pattern":"[url:value = 'http://78.36.11.185:1080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c505a4b-4fd0-a5a6-0d99-0000a386c3f9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.25:65481/i","pattern":"[url:value = 'http://114.31.8.25:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574af2ee-76fa-97dc-ba1d-0000e78993e2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://115.127.68.162:55090/i","pattern":"[url:value = 'http://115.127.68.162:55090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83465252-e513-f7c0-2720-00008c7c6480","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.201:26818/i","pattern":"[url:value = 'http://202.40.178.201:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d2efa6-5fd2-27c6-95cb-000098b83844","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.226:26818/i","pattern":"[url:value = 'http://202.40.178.226:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb23183-b4e7-6f8b-5fcd-0000f437358a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.sh4","pattern":"[url:value = 'http://160.187.146.122/where/botx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528a5516-772b-61b0-cb80-0000267c5911","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff93a9f3-a6bf-1ee2-f8b6-000055374d86","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mpsl","pattern":"[url:value = 'http://160.187.146.122/where/botx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066d5bec-d44f-236d-b609-00003ec2f516","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.m68k","pattern":"[url:value = 'http://160.187.146.122/where/botx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a416f3a-ea32-176e-4534-00003e3423cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mips","pattern":"[url:value = 'http://160.187.146.122/where/botx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703714aa-900e-d2f4-20c9-0000b68aef32","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm5","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a8e9df-b3b6-d389-2773-00002512547a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/wget.sh","pattern":"[url:value = 'http://160.187.146.122/where/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7df99e-8a28-d00a-d8d7-0000e83187ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8201/sshd","pattern":"[url:value = 'http://81.22.42.232:8201/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b0132f-335d-76be-0d9c-00006de9b608","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.107/sshd","pattern":"[url:value = 'http://121.202.208.107/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e548ee-a08b-c230-088f-0000bfca6be7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8013/sshd","pattern":"[url:value = 'http://201.94.181.7:8013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928d95d-4fd4-9e3e-2982-0000f55d2ea8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8016/sshd","pattern":"[url:value = 'http://201.94.181.7:8016/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e07856-2528-a75b-672e-0000dbab062e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8014/sshd","pattern":"[url:value = 'http://201.94.181.7:8014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3a43d-a536-781a-4aaa-00000d74c9db","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.209.31/sshd","pattern":"[url:value = 'http://121.202.209.31/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad70e51-d2fc-3594-be52-00001f3c6b0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.237/sshd","pattern":"[url:value = 'http://121.202.208.237/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae98b30-f321-9d1a-229d-0000d1bcbb28","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8202/sshd","pattern":"[url:value = 'http://81.22.42.232:8202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0c0c97-c7b2-2a2e-614b-0000a929e846","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/sora.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f2fe88-c796-7dba-6277-0000c2dc50d6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6203841-c954-9061-47a5-0000a9df3e9c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mips","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d34b265-0789-cda1-0591-00004d2d7477","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/sora.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555e34a7-c63a-0d9b-0629-00001fb8811a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555f126b-5c49-41d4-4229-000033d45d8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c57b20d-1309-1d1b-4694-0000df52debc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/w.sh","pattern":"[url:value = 'http://160.187.146.122/bins/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32c72c5-e438-2e13-c422-00004cc36661","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/c.sh","pattern":"[url:value = 'http://160.187.146.122/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--410b8fec-5baa-9cee-3b4e-00007f473127","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mpsl","pattern":"[url:value = 'http://160.187.146.122/where/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c843ef1-d2d5-06a2-47d0-0000eb600071","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/sh4","pattern":"[url:value = 'http://160.187.146.122/where/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d94925-35f7-2daa-1197-000014445f6d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mips","pattern":"[url:value = 'http://160.187.146.122/where/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d6dca6-071e-3926-bb96-00006bbe9987","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/ppc","pattern":"[url:value = 'http://160.187.146.122/where/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2464ed68-1b87-f526-3758-000013bdf7f2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86","pattern":"[url:value = 'http://160.187.146.122/where/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf32b5-a960-d49f-1c27-00009cfa9393","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm5","pattern":"[url:value = 'http://160.187.146.122/where/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f57df3-1b17-e7c2-3fca-000014b289b7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/m68k","pattern":"[url:value = 'http://160.187.146.122/where/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702d9a17-43c4-14e0-2266-0000236ecece","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a0f26e-0675-5f8f-5d60-000046638310","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.sh4","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87ad7ea-cdbc-f7b1-f51b-00002eaadbfa","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f21039-996a-5ae0-3679-0000c6bd1ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b4ae60-3740-6d4d-15ad-000040296848","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.spc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c26703-997f-5b9a-9cfd-0000a9e6a5dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86_64","pattern":"[url:value = 'http://160.187.146.122/where/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a15399-2374-660d-a1d3-000036f35b18","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm7","pattern":"[url:value = 'http://160.187.146.122/where/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2098ac-d461-2e8c-da81-0000a6e2c1de","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac1e462-5399-04cd-0fcd-000069549e54","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38e5141-3ab9-efc1-b4e9-00002c8e6098","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm7","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218425f5-c617-db4e-cad5-0000455f636a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92248d34-2ae4-b627-7246-0000653a0aa7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2664198-34f4-3e53-9e8d-00004ac5163d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.spc","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848961d7-41a9-66ae-1cfe-0000943207fd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d80306d-4ffb-7ac3-b255-00008687a813","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bda7f2b-3d46-a0d7-6112-00000ecfb237","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd92ce0f-85e2-cfc3-54d2-0000b4520ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a7903-17ba-24db-227f-00009ec491fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ca4c4f-ac78-4dd3-129c-0000a8cda452","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.50.222.238:51680/i","pattern":"[url:value = 'http://77.50.222.238:51680/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664efe84-f213-cac1-57a4-000009115630","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.239.98:802/sshd","pattern":"[url:value = 'http://2.54.239.98:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e707999-f835-d5b1-66e6-0000a84c755c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.204.105.97:30802/i","pattern":"[url:value = 'http://85.204.105.97:30802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90bd54ad-1018-6a26-e744-00004ed1dc6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://87.119.108.21:40462/i","pattern":"[url:value = 'http://87.119.108.21:40462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b735449a-7331-3eb5-47da-0000c654361d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://183.91.77.253:19833/i","pattern":"[url:value = 'http://183.91.77.253:19833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6384224e-0307-d1f7-1282-0000c315e41e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.98.176.195:8022/sshd","pattern":"[url:value = 'http://201.98.176.195:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0004dad-1ecf-e910-8138-00006001ba35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.84.143:802/sshd","pattern":"[url:value = 'http://2.54.84.143:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb914ea-d7da-bcf7-1cf1-0000cc10ccce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.193/sshd","pattern":"[url:value = 'http://121.202.208.193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2e7183-aa83-aa78-d2b0-0000fdf7a502","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14-0-204-188.static.pccw-hkt.com/sshd","pattern":"[url:value = 'http://14-0-204-188.static.pccw-hkt.com/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450906ac-3128-3937-04f1-00000b92fecd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://223.83.211.82:8000/sshd","pattern":"[url:value = 'http://223.83.211.82:8000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10808ec3-49d9-7612-c54e-00002f275b42","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.26.97.59/sshd","pattern":"[url:value = 'http://195.26.97.59/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3938239b-f45f-5c90-0dfa-0000939bdd79","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://202.88.234.44:64615/i","pattern":"[url:value = 'http://202.88.234.44:64615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf40096a-b9f7-73f2-d0d9-00001628f13e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://93.116.56.78:3976/i","pattern":"[url:value = 'http://93.116.56.78:3976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ef2705-d8e7-5d09-6e68-000018cdca0c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://31.28.31.6:50871/i","pattern":"[url:value = 'http://31.28.31.6:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b04175-8a83-7703-41d8-0000844f22ca","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://191.33.171.242:55443/i","pattern":"[url:value = 'http://191.33.171.242:55443/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c279b0d-b19a-9756-ee0f-0000cb11303b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff13f38-85e6-952f-31ec-00004c6a193f","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7899769-6b9b-f754-6056-0000191492bf","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc85eccc-6c18-6787-f334-000003dae119","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28665217-8a4b-e746-2e73-0000c1430bc8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b01688e-ca1b-9408-c3f1-0000c5fea246","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac15f6ae-a1c4-bd1e-09ec-000008ab97b8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b37a6c9-7cac-52aa-3f6c-00002ae8561a","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://47.96.106.127:8890/02.08.2022.exe","pattern":"[url:value = 'http://47.96.106.127:8890/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef6e4a4-9c6e-a3ed-4901-000044cbd1fd","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:83/sshd","pattern":"[url:value = 'http://90.8.83.87:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976e93b9-38ca-3e55-c417-0000ce9f1520","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87/sshd","pattern":"[url:value = 'http://90.8.83.87/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f8459-8d15-c299-beb8-0000a8448353","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://85.57.30.25:7480/sshd","pattern":"[url:value = 'http://85.57.30.25:7480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633e45af-3a3f-6926-2620-00006a3df97b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:81/sshd","pattern":"[url:value = 'http://90.8.83.87:81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b882f4-6545-700a-359c-00008ab45f87","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.142.68/sshd","pattern":"[url:value = 'http://121.202.142.68/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabc1d44-5a95-877b-e260-0000be5ef3f3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.153.132/sshd","pattern":"[url:value = 'http://121.202.153.132/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe92ed87-01bd-02a1-a542-0000e5dd379c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.141:2000/sshd","pattern":"[url:value = 'http://61.2.45.141:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ee5976-c12d-b133-1f83-000088c1783e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.172:2000/sshd","pattern":"[url:value = 'http://61.2.45.172:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51175c9f-473b-6f12-e0a6-000097e42dad","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.247.2.226:48894/i","pattern":"[url:value = 'http://177.247.2.226:48894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52beabcd-fc56-2541-bf3f-00000c2bbb46","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.236.116.198:23704/i","pattern":"[url:value = 'http://45.236.116.198:23704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26364721-c16e-ae00-bf41-0000bd7b2504","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://24.37.71.230:54401/i","pattern":"[url:value = 'http://24.37.71.230:54401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f72898-059f-ee63-527d-000079f265f7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://88.24.52.121:10062/sshd","pattern":"[url:value = 'http://88.24.52.121:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47b19f7-dddb-7291-78dc-0000182a21e3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://91.147.91.21:23459/i","pattern":"[url:value = 'http://91.147.91.21:23459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6625d862-0b07-8130-542f-0000bdc0c1d6","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.196.93/sshd","pattern":"[url:value = 'http://121.202.196.93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e909afa-1469-2572-3f42-0000378442f2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://130.61.147.74/bot.zip","pattern":"[url:value = 'http://130.61.147.74/bot.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb15f2db-2139-2d37-21b6-00003efdf860","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://34.70.102.215/linpeas.sh","pattern":"[url:value = 'http://34.70.102.215/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d466cd-d48c-f4b9-b82f-0000df189ae9","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: https://1h.vuregyy1.ru/4pi3llms81.hta","pattern":"[url:value = 'https://1h.vuregyy1.ru/4pi3llms81.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eaf837a-d178-1d86-d95e-0000fbd7ddf7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://95.43.76.100:43118/.i","pattern":"[url:value = 'http://95.43.76.100:43118/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1b90535-e35a-6c9d-34e9-0000191c9d09","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://2.55.126.179:802/sshd","pattern":"[url:value = 'http://2.55.126.179:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0bf015-dece-401b-3ebe-00006df51c0e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.93.200.20:2260/i","pattern":"[url:value = 'http://103.93.200.20:2260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbde383-454b-0915-e872-0000d7868f22","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://181.129.100.123:30581/i","pattern":"[url:value = 'http://181.129.100.123:30581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee9e4a4-2932-0fc5-45aa-0000c9c3dc18","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://183.81.156.125:12929/i","pattern":"[url:value = 'http://183.81.156.125:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b694493-4cce-4748-b12c-0000ab581081","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.115.254.91:32515/i","pattern":"[url:value = 'http://45.115.254.91:32515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e60be9e-2fbc-4d75-4c6d-0000340f3254","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37782/sshd","pattern":"[url:value = 'http://36.154.188.50:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a81f95-d227-7fcc-b45e-00001af91ad2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37780/sshd","pattern":"[url:value = 'http://36.154.188.50:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8f0477-52f9-72f9-089a-0000bca360d2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://188.95.148.167:9393/sshd","pattern":"[url:value = 'http://188.95.148.167:9393/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e708a0-7e08-7776-3354-0000dbb9e5af","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.48.13.117:21861/i","pattern":"[url:value = 'http://178.48.13.117:21861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4778ec3-c562-582f-3abe-00000cfe3c59","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.112.126.123:1600/i","pattern":"[url:value = 'http://45.112.126.123:1600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f57b8ba-b787-c190-8dc1-0000e5acde80","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.220.234.5:53133/i","pattern":"[url:value = 'http://178.220.234.5:53133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a750e95f-5bec-8bc4-57fe-0000774135d5","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f605a9e1-8177-6506-73d9-000053f90ce0","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Photo.lnk","pattern":"[url:value = 'http://103.8.164.18/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83385531-37f8-e957-fe07-00003e11db05","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Video.lnk","pattern":"[url:value = 'http://103.8.164.18/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d9b86-6d67-a66f-ac95-0000c6a42d10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.246.178.42:62425/i","pattern":"[url:value = 'http://188.246.178.42:62425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63752de4-c526-9533-cd4b-00005ad8e2ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.lnk","pattern":"[url:value = 'http://80.147.155.189/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1648d134-4a9a-782e-e193-000037303508","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.lnk","pattern":"[url:value = 'http://80.147.155.189/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a6a7d-c3b4-4982-6ff2-0000879da53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/Install/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/Install/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c88cd-77d2-71fe-4aec-0000b1342e9c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/RelFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/RelFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c825e47-6977-69eb-19fa-0000a62d4c51","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/ExeFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/ExeFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53044cf-c389-fe4b-174e-0000dc492e8b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/GdbFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/GdbFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2f2b1a-7132-a65b-53fe-00003866a357","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.25.123.70:8080/sshd","pattern":"[url:value = 'http://109.25.123.70:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a528a2f5-65b4-4798-11e3-0000eefd82a1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.234.234.14:16507/i","pattern":"[url:value = 'http://45.234.234.14:16507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e5ae0b-8eac-0d39-ba7d-000018c72d28","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/i","pattern":"[url:value = 'http://50.43.160.231:38064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d286872-5b6e-6f5b-f0c5-00003b92b0a8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.173.101.114:10000/swt","pattern":"[url:value = 'http://107.173.101.114:10000/swt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8053aa22-e585-0861-dcab-00006935838d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.90.122.2:36364/i","pattern":"[url:value = 'http://116.90.122.2:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60418e02-a41d-f086-1a94-000053295563","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/2","pattern":"[url:value = 'http://178.16.54.109/2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5289c0-6bbf-28e4-35bc-00000afdc098","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/i","pattern":"[url:value = 'http://36.64.227.134:63289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2819ed06-0b71-35ff-75a1-00007f401c55","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://117.72.242.9:9999/02.08.2022.exe","pattern":"[url:value = 'http://117.72.242.9:9999/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df80180-5929-a3ce-8ec6-0000bf3e151c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.lnk","pattern":"[url:value = 'http://80.147.155.189/AV.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ca1f24-521a-84a5-0053-00007dd98e07","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.scr","pattern":"[url:value = 'http://80.147.155.189/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f7e3f4-0fd7-deed-6ada-0000103159e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.scr","pattern":"[url:value = 'http://80.147.155.189/Video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b473340-b9a4-e31b-0730-0000983f79f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.scr","pattern":"[url:value = 'http://80.147.155.189/AV.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1115c62d-05c2-e1dd-c831-0000349e042f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.77.244.174:8602/info.zip","pattern":"[url:value = 'http://220.77.244.174:8602/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e72eef-e1e1-0dc0-2839-000063a1ace7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8b07df-ad3a-9e8a-b8db-00004788fb41","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445c0f5f-2362-1c98-71b9-000076d32d77","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304ebef7-5bff-b5cd-d64f-0000afdfcf6a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676cfea-fbe2-0e2a-e7ea-0000a5070f96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb706cec-b435-48c9-6b08-0000cdc33916","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdbcea3e-281e-5cf2-9436-0000bcc56948","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3594e545-e0b6-e7e1-6d9f-0000564c5a44","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e01e3f4-3caa-3495-d2c5-000044ef0e35","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951953c5-2a00-de07-ae0d-000096efb7c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c59f133-4861-17ec-a06a-0000cd4b2747","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52e5aa4-d048-99e7-87c1-0000b68508c6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3305c435-9dd0-065d-0a0f-0000092a8423","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a7bce-3100-3e21-dabc-00002832e67f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47dd59-88ec-5780-92d7-00004b353f5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f28f311-b3a1-8534-8885-0000e3b69652","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e0178f-ff72-45e7-fb54-0000bb967fe5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ced049-b087-617e-85a7-000076d9d96b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01568980-5c1a-5d02-1632-00007d0a89ec","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0236ca9-5383-0c4f-eba1-000049f07658","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4398af10-a747-34cd-967f-00003f1b5dcd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b748df-5f0e-0884-e59b-00001f06d487","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08c0192-ef34-13c6-254b-0000f7f4d7da","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c3db1d-ac15-36cd-eb38-00008029fa30","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbbba91-2463-6579-766f-00004a3ebb14","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9280769e-1730-9e62-4009-000097268d96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef961f9-f4b8-f1d9-7fb2-0000f6e41db1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1750929d-3885-8d9e-f1a4-000029a1d776","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6b5e92-9a8e-0d8a-0a36-0000f4b9e1f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c47e9-65ff-fb6b-4c96-0000a9795a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.208.202.85:9914/i","pattern":"[url:value = 'http://103.208.202.85:9914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4b818f-225d-669f-96b6-0000dd89287e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://39.105.200.188/02.08.2022.exe","pattern":"[url:value = 'http://39.105.200.188/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c70381-ce51-4a66-5092-00003aac303e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bc65cf-7aa3-cfd3-3145-0000b4d8f483","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc43167-e6da-0525-777c-0000e3ba991c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f626dd-34b2-8921-800b-0000e62737b5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30dab3f-abc7-edbd-47e3-0000e803fe3f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.lnk","pattern":"[url:value = 'http://68.110.47.231/av.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ef6741-d08c-b622-595e-00009f27a030","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0206c5-e48d-2d7d-abcd-0000db46d704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3ea491-5d3c-8f39-0c85-000003adf3e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.lnk","pattern":"[url:value = 'http://68.110.47.231/photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8035841-6dfe-a59d-c84e-00006e452407","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.lnk","pattern":"[url:value = 'http://68.110.47.231/video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f820f8-b298-fddf-56ce-000069433963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4583570-f1a1-193c-419a-00006706364a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fb2f47-34e6-9f38-ede4-0000b9d0cd84","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebc6a81-899b-97d7-0e2e-0000494448ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.scr","pattern":"[url:value = 'http://68.110.47.231/video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b299ff-5764-1f13-2da8-0000cf0292d5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.scr","pattern":"[url:value = 'http://68.110.47.231/av.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b819651-9719-742e-0a12-000024ac9f08","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.scr","pattern":"[url:value = 'http://68.110.47.231/photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b6eacb-86af-7f7c-caf4-0000ef1f31c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/info.zip","pattern":"[url:value = 'http://68.110.47.231/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2526ca12-4ea4-b83c-fe37-000008cc88ac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.154.90.21:4747/i","pattern":"[url:value = 'http://103.154.90.21:4747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf137d-b67c-2ebb-e954-0000c26b20d6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.190.74.159/sshd","pattern":"[url:value = 'http://88.190.74.159/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4144fab-0e57-6682-5a84-00004c60707c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.66.224.73:8080/sshd","pattern":"[url:value = 'http://82.66.224.73:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69780bcd-d1db-8c70-4fa9-0000d02b6011","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/i","pattern":"[url:value = 'http://138.219.58.34:28990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54527f32-6da7-8a9f-3358-0000fe5b21e5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.219.38.228:23053/i","pattern":"[url:value = 'http://178.219.38.228:23053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31ea338-d6a4-1bc0-6985-0000a12b236c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://86.89.95.77:8999/sshd","pattern":"[url:value = 'http://86.89.95.77:8999/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2504f598-2c9f-9f5f-1eb9-000069d07d22","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d14ff0-f238-7a47-2c98-0000c7878705","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://93.39.215.44:9111/sshd","pattern":"[url:value = 'http://93.39.215.44:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceba9d76-e743-dbc2-3335-00004b51ff47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://129.0.120.134:9999/i","pattern":"[url:value = 'http://129.0.120.134:9999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb95120f-a3a6-7153-9df7-000007bb1540","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.189.6.236/curl","pattern":"[url:value = 'http://107.189.6.236/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4bc18b-2379-8b53-05ea-00002af9cf74","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://2.55.81.169:802/sshd","pattern":"[url:value = 'http://2.55.81.169:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfe021c-8aca-0704-57fd-00008979a27f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://85.187.54.142:10032/sshd","pattern":"[url:value = 'http://85.187.54.142:10032/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f5b049-f461-f1e7-7c97-0000a22f5bbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/i","pattern":"[url:value = 'http://41.162.188.251:22850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07812323-6c9c-85cd-31ec-0000ea6b79c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://66.39.79.68/","pattern":"[url:value = 'http://66.39.79.68/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9d6525-c8a6-d0d4-3f6c-00005cc4b141","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://3.141.75.29/","pattern":"[url:value = 'https://3.141.75.29/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcbb965-cd0f-0037-7fc8-000083db42b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://13.113.8.105/","pattern":"[url:value = 'https://13.113.8.105/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24215dc5-8738-5fda-da32-0000206e2266","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://18.217.254.255/","pattern":"[url:value = 'https://18.217.254.255/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b6dc1c-fc95-acfc-b7e0-0000eec58332","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.134.8.43:93/sshd","pattern":"[url:value = 'http://188.134.8.43:93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25368e03-b127-e7ff-b801-00009c8adb8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.42.177.12:3389/i","pattern":"[url:value = 'http://94.42.177.12:3389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b744ff-d533-2f4c-58a3-00008bfeddad","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://scrroeder.com/1q1q.js","pattern":"[url:value = 'https://scrroeder.com/1q1q.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d6166-eccc-e395-8dcd-0000f7c9b5f9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.255.210.242:45640/i","pattern":"[url:value = 'http://37.255.210.242:45640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2dbb3b-bba3-7301-ed40-00009ea664f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.127.68.162:55090/","pattern":"[url:value = 'http://115.127.68.162:55090/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7ef27d-c06e-d3ed-7c59-0000396861f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.160.116.52:57196/","pattern":"[url:value = 'http://182.160.116.52:57196/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d7dd86-ea81-3a2d-3cb9-00003defde8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN32.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN32.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3023826f-2423-b54e-c331-00001c2f4238","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11684f3-dfb0-7e61-0d33-0000e8cf60e8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namuxp.zip","pattern":"[url:value = 'https://www.namuvpn.com/install/namuxp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61bd262-9f78-178a-7f58-0000864e3467","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://46.151.56.42:28186/","pattern":"[url:value = 'http://46.151.56.42:28186/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94937ca-2ef5-558e-bfe9-0000f7490fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namu864.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/namu864.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7a75cd-1d33-b314-792d-00008f995523","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.240.70.185:14868/","pattern":"[url:value = 'http://115.240.70.185:14868/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cdb7dc-ec28-1053-db70-00003eb40f2a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://122.170.110.131:9105/cryptography_module/base_library.zip","pattern":"[url:value = 'http://122.170.110.131:9105/cryptography_module/base_library.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a16802-5e37-5fef-8592-0000fb07e392","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.12.78.161:36220/","pattern":"[url:value = 'http://185.12.78.161:36220/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cecb3c-def4-1a98-9751-00008dd5b869","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.244.113.217:53408/","pattern":"[url:value = 'http://94.244.113.217:53408/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582bfe06-1a83-6a01-b544-0000d6780c37","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.220.234.5:53133/","pattern":"[url:value = 'http://178.220.234.5:53133/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba24c3fa-545b-9ea2-6836-000090f1d34e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://81.16.249.96:46703/","pattern":"[url:value = 'http://81.16.249.96:46703/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e68681-e978-991e-d1e0-000030314c69","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.20.138:24291/","pattern":"[url:value = 'http://202.148.20.138:24291/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0008fcce-6f1a-11e9-dff2-0000d995d867","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.252.69.10:58829/","pattern":"[url:value = 'http://37.252.69.10:58829/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d234c40-2f2b-0fd8-8926-00007a47b918","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/","pattern":"[url:value = 'http://87.119.108.21:40462/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb044475-7d03-8e82-8646-00003534a1f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://190.12.99.194:28516/","pattern":"[url:value = 'http://190.12.99.194:28516/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a343dc-fe30-530b-4a38-0000e46e671f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/","pattern":"[url:value = 'http://138.219.58.34:28990/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce8ae5c-05ff-d7c4-f69f-00000f85691b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.75.193.34:9432/","pattern":"[url:value = 'http://217.75.193.34:9432/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ed4678-ee1e-6c4f-935f-0000d60c0a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://212.107.232.167:21838/","pattern":"[url:value = 'http://212.107.232.167:21838/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1dfd23-71b3-0ded-1133-00000c694e21","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.155.92.203:3956/","pattern":"[url:value = 'http://216.155.92.203:3956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0de4e6-212c-79ab-63b7-00001dbaa387","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://83.218.189.21:5195/","pattern":"[url:value = 'http://83.218.189.21:5195/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e47c66c-795f-7e73-3db0-0000c0a3d35f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.164.117.74:42924/","pattern":"[url:value = 'http://103.164.117.74:42924/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8418c75e-07d7-c007-19d5-000005839f4f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.134:10702/","pattern":"[url:value = 'http://154.0.129.134:10702/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeaeb04-5640-421f-ffc1-00000e2acce8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.140.32.219:12617/","pattern":"[url:value = 'http://78.140.32.219:12617/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57278d8c-e83b-ed99-df06-0000377ef470","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.178.100.190:4788/","pattern":"[url:value = 'http://115.178.100.190:4788/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7f01e7-dd4d-1949-ec66-0000817adeeb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.131.234.26:51118/","pattern":"[url:value = 'http://202.131.234.26:51118/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3136cb6a-d1da-5c53-a4f2-000056829075","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.114.200.50:48416/","pattern":"[url:value = 'http://82.114.200.50:48416/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85768dff-2b2c-c418-e39d-00007da543c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://186.138.107.5:14491/","pattern":"[url:value = 'http://186.138.107.5:14491/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af68559-6d19-c823-b4bd-000085316bfc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.84.212.18:20781/","pattern":"[url:value = 'http://154.84.212.18:20781/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709c94e2-097a-c055-edcf-0000b284d161","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.114:10702/02.08.2022.exe","pattern":"[url:value = 'http://154.0.129.114:10702/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b0f07c1-caa6-b227-76ad-0000bbe532c4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://62.197.62.195:60001/sshd","pattern":"[url:value = 'http://62.197.62.195:60001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43055a89-7b5e-bec5-b042-00002aac24b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.95.137.155:1876/i","pattern":"[url:value = 'http://36.95.137.155:1876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d63bcf-68a2-80f6-e5ce-00003d870cf3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/.i","pattern":"[url:value = 'http://45.147.202.53:9635/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64350af1-fbca-140c-a0d6-0000ec2c7084","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://102.23.89.5:8083/sshd","pattern":"[url:value = 'http://102.23.89.5:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee6607e-b7f5-80d8-558f-0000868d2cb0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/bin.sh","pattern":"[url:value = 'http://95.155.243.196:38537/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b874ce90-cf7e-a8bf-d768-00000b74b203","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/i","pattern":"[url:value = 'http://95.155.243.196:38537/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883604e0-252e-ab78-8d96-0000f642c51b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/i","pattern":"[url:value = 'http://45.147.202.53:9635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7cce0f-08ef-babb-f640-0000f3e0c59b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/i","pattern":"[url:value = 'http://213.5.194.56:43416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93035d0-93bc-7fe6-e0b3-0000fd17826d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.62.202.150:10052/sshd","pattern":"[url:value = 'http://95.62.202.150:10052/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5d6720-7283-d5a7-784c-0000f35dd3dd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.40.178.238:53237/i","pattern":"[url:value = 'http://202.40.178.238:53237/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac6865-c961-850b-7a63-0000c82e4275","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://184.185.30.182:29029/.i","pattern":"[url:value = 'http://184.185.30.182:29029/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4c197f-6641-6b78-fef3-00004fb1ce8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.88.6.203:8907/.i","pattern":"[url:value = 'http://36.88.6.203:8907/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5622e337-511f-6bcb-f3c5-000075615726","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/.i","pattern":"[url:value = 'http://41.162.188.251:22850/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9348eec-3138-90f8-7afc-0000d03a2dd3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/.i","pattern":"[url:value = 'http://213.5.194.56:43416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58307433-746f-48c0-96dc-0000bfd19261","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://196.39.143.113:8080/sshd","pattern":"[url:value = 'http://196.39.143.113:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce71d395-64a9-6c1f-b41d-000082b9e80d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/.i","pattern":"[url:value = 'http://50.43.160.231:38064/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abde195-b523-54ef-1bff-0000fd1b3223","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.135.26.83:32710/.i","pattern":"[url:value = 'http://88.135.26.83:32710/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce829b5-2a26-e831-0c57-0000dd748c48","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/.i","pattern":"[url:value = 'http://138.219.58.34:28990/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16807076-4e38-1bc7-176e-0000668dab8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/.i","pattern":"[url:value = 'http://45.173.12.30:17886/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151bc9aa-30e5-63c2-40c0-0000b0c438e6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://24.37.71.230:54401/.i","pattern":"[url:value = 'http://24.37.71.230:54401/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9179fe-7d07-4d96-3b0c-000032d97aa6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://77.50.222.238:51680/.i","pattern":"[url:value = 'http://77.50.222.238:51680/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb09d5c-720d-3077-376e-00009e5ed59f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.88.234.44:64615/.i","pattern":"[url:value = 'http://202.88.234.44:64615/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b416d8-0801-b0c9-0e17-0000a778e31c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv5l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a82745a-044b-c2ac-afad-0000ddb8b07c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv7l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd7aa72-2e1d-91f4-ee38-0000ef5cea5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/x86","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5399451b-1998-958c-6d64-0000e0d899cc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv6l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09400318-297b-8c01-3639-0000bbb2a53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/mips","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61af2799-6037-cb4a-c1d2-00009a18caac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv4l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781a6a6a-4979-5ce1-d96b-0000d3467177","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://181.171.188.254:17418/.i","pattern":"[url:value = 'http://181.171.188.254:17418/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1a38db2-2fd3-ef46-ee84-0000f35e7b75","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/.i","pattern":"[url:value = 'http://87.119.108.21:40462/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7589f785-0271-e3cf-7640-0000dc11d04e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://52.248.41.253:8443/02.08.2022.exe","pattern":"[url:value = 'https://52.248.41.253:8443/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e986518d-d8f1-4b2d-65c5-0000bae08794","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/busybox-armv7l","pattern":"[url:value = 'http://156.246.93.156/busybox-armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cd78af-c064-7ec1-f4a9-000024611224","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.8.20.75:10002/sshd","pattern":"[url:value = 'http://88.8.20.75:10002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6d97a3-6221-f8c9-f2a2-0000224ba7a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/i","pattern":"[url:value = 'http://45.173.12.30:17886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e554c16-d6d2-a19b-fac2-0000ab103f20","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.18.221:30944/i","pattern":"[url:value = 'http://202.148.18.221:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89159d06-c445-943b-115a-000059c92929","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.89.189.98:46828/i","pattern":"[url:value = 'http://80.89.189.98:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6a8a8-4319-2b32-80ae-000037c41849","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.67.246.82:22072/i","pattern":"[url:value = 'http://36.67.246.82:22072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40918c38-bea0-b756-c3e0-0000ce308553","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.6.196.230:27629/.i","pattern":"[url:value = 'http://213.6.196.230:27629/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348700a8-d0d9-ff78-980e-000050c15fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.93.200.20:2260/.i","pattern":"[url:value = 'http://103.93.200.20:2260/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb90a907-8f24-e3e1-2e27-00007ef3c734","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/.i","pattern":"[url:value = 'http://103.90.206.87:4419/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff581a65-43b1-253f-4e85-00006ff76f87","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.54.221.234:55031/.i","pattern":"[url:value = 'http://200.54.221.234:55031/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61adc761-5bcd-1762-d3e0-000091bf7a04","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.118.103.42:26816/.i","pattern":"[url:value = 'http://200.118.103.42:26816/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29c7f8a-28ba-9c62-42b2-000049ca616c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/.i","pattern":"[url:value = 'http://36.64.227.134:63289/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a337c623-0194-427f-1c5f-0000eb606873","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/i","pattern":"[url:value = 'http://103.90.206.87:4419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad357b-d21b-45bf-923b-0000a684dfc6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8083/sshd","pattern":"[url:value = 'http://144.6.89.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a805c3-b857-25c6-34ca-0000c2e5b20f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8084/sshd","pattern":"[url:value = 'http://144.6.89.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c2c9b-f73d-8b74-078b-0000136e05ca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://31.55.236.199:8080/","pattern":"[url:value = 'http://31.55.236.199:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0bf3dd-e859-a1cd-a05e-0000d9648847","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://141.134.214.46/","pattern":"[url:value = 'http://141.134.214.46/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67cfe3f-4896-07b7-0a10-000008cd1681","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.86.50.18:88/","pattern":"[url:value = 'http://116.86.50.18:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0691ff42-3997-fc60-49c2-0000934442a6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.3.138:88/","pattern":"[url:value = 'http://80.147.3.138:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348b28e-0771-09a1-407d-0000b129769f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.246.34.66:8088/","pattern":"[url:value = 'http://220.246.34.66:8088/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec1914-59c4-596a-b91d-0000dde549cb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://174.71.238.196:81/","pattern":"[url:value = 'http://174.71.238.196:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36c5e96-b3c5-ee41-5e2e-00006dd4dc86","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.167.179.75:88/","pattern":"[url:value = 'http://188.167.179.75:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783148f-3bde-1a82-a9d1-000044001c0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.93.58.234:82/","pattern":"[url:value = 'http://182.93.58.234:82/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef919d2-1ce2-0907-88e9-0000251a474e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.165.183.55:83/","pattern":"[url:value = 'http://213.165.183.55:83/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d359599c-b028-2e1b-1b26-000079b10ba4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://108.41.80.142:84/","pattern":"[url:value = 'http://108.41.80.142:84/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db84825-7e02-1e5b-6586-000037ea3f0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.44.199.50/","pattern":"[url:value = 'http://78.44.199.50/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d0cc06-f2d1-4b73-021d-0000116773bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.167.133.17/","pattern":"[url:value = 'http://109.167.133.17/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8650eb-4de8-42fc-27d6-0000efa10102","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.175.181.210:81/","pattern":"[url:value = 'http://202.175.181.210:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9474e5d-b834-7130-30cb-000016504e4c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://121.101.79.178:88/","pattern":"[url:value = 'http://121.101.79.178:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48303aad-4b5e-985e-9370-000026a66500","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://92.43.24.71/","pattern":"[url:value = 'http://92.43.24.71/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc34396e-4117-129b-6a02-0000990fda47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://193.165.245.46:8000/","pattern":"[url:value = 'http://193.165.245.46:8000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58130e20-3746-0f54-94f7-0000d6066f46","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://218.103.122.102:50956/","pattern":"[url:value = 'http://218.103.122.102:50956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b03a58-2b96-b7c2-5ec0-000078115704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://124.36.156.140:8080/","pattern":"[url:value = 'http://124.36.156.140:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cff67c-7d61-31be-4110-0000e0a04d54","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.180.227.121:81/","pattern":"[url:value = 'http://90.180.227.121:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850afd1c-9b40-980b-e1e1-0000a08d69d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://159.196.16.186:88/","pattern":"[url:value = 'http://159.196.16.186:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9db4f60-cc57-45ba-7681-0000da41d6d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.138.104.129:4000/","pattern":"[url:value = 'http://87.138.104.129:4000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d33667-dd98-387d-44ca-00002f288a18","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.60.107.150:8080/","pattern":"[url:value = 'http://185.60.107.150:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1ef1d2-d2ef-7bd2-a016-00008dd34985","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.118.128.34:30117/i","pattern":"[url:value = 'http://185.118.128.34:30117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287dceca-8fd1-65ab-f14e-00001383a151","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://47.152.112.236:8105/sshd","pattern":"[url:value = 'http://47.152.112.236:8105/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd7df02-3ca3-0738-36fa-0000e9e50f0a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.86.246.233:38185/sshd","pattern":"[url:value = 'http://88.86.246.233:38185/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb72f670-534f-8115-e870-00005c6a7b2e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/pg.sh","pattern":"[url:value = 'http://78.153.140.16/pg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445a2d1f-0973-63c0-c0d0-0000489843a2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.122.211.138:31644/02.08.2022.exe","pattern":"[url:value = 'http://200.122.211.138:31644/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e7aac-53b7-4c74-bd46-0000167c5d00","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/for","pattern":"[url:value = 'http://78.153.140.16/for']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a75098b-67da-aacc-ebf5-0000e8bb8faf","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/busybox","pattern":"[url:value = 'http://78.153.140.16/busybox']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4970a14-bdc3-2424-9b10-00007bdda0bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/bin.sh","pattern":"[url:value = 'http://96.66.24.241:39432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a042a2-4ee6-0df8-16ba-00003a134256","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/i","pattern":"[url:value = 'http://96.66.24.241:39432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b52d4b-073d-61cc-ff2a-000013983af3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.87.112.128:47907/i","pattern":"[url:value = 'http://213.87.112.128:47907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7f537d-f379-484e-d157-0000f973dc3d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/i","pattern":"[url:value = 'http://217.208.164.149:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ae5d32-d3be-2eb7-b76f-0000ede2d987","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/mt.sh","pattern":"[url:value = 'http://78.153.140.16/mt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348d6c93-6397-282c-2d53-000051629805","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/curl-amd64","pattern":"[url:value = 'http://78.153.140.16/curl-amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b01bf7-ef17-0d7c-3eb9-000026aa58de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/sc.sh","pattern":"[url:value = 'http://78.153.140.16/sc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c378fa78-a9bf-1c79-a5d0-00001e198cbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/xx.sh","pattern":"[url:value = 'http://78.153.140.16/xx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a311e626-244d-e761-b69d-0000aa220bc7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/ph.sh","pattern":"[url:value = 'http://78.153.140.16/ph.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2783abe3-5861-83c6-3fc3-000066909cc8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.224.208.161:48263/bin.sh","pattern":"[url:value = 'http://90.224.208.161:48263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4529c55b-3cb9-09da-4bc8-000060a03fdd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/bin.sh","pattern":"[url:value = 'http://217.208.164.149:45464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d99a05e-172c-b197-3d88-0000b580d130","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/3.exe","pattern":"[url:value = 'http://178.16.54.109/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a9a1bc-5aa8-0b33-865c-00002024d4b8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/armv5l","pattern":"[url:value = 'http://195.178.110.204/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9721d6b-4c36-05f8-fd20-0000f1931dca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips","pattern":"[url:value = 'http://195.178.110.204/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6247cd-418b-6395-4935-000071859977","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i486","pattern":"[url:value = 'http://195.178.110.204/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f858d7a9-de4a-25b4-1f21-00008916a9a7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mipsel","pattern":"[url:value = 'http://195.178.110.204/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcb720b-0e1f-66f3-57ee-0000e99caabc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sh4","pattern":"[url:value = 'http://195.178.110.204/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4edc52-21b4-f35a-7fc0-000027a759de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sparc","pattern":"[url:value = 'http://195.178.110.204/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4157be1c-2394-5766-8409-00006e03589a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/powerpc","pattern":"[url:value = 'http://195.178.110.204/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e29bd-81cf-7674-0e7a-0000f165cb10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/m68k","pattern":"[url:value = 'http://195.178.110.204/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da02dfa-854f-4ea3-91d8-0000bad94ad2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i586","pattern":"[url:value = 'http://195.178.110.204/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7e00f8-dfeb-405d-79d2-0000f81c3bf1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips64","pattern":"[url:value = 'http://195.178.110.204/mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978ef74c-f046-6b3c-76b3-0000dc0be8c0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/y","pattern":"[url:value = 'http://195.178.110.204/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775b1e52-a5b9-b5cb-180d-0000b3b608a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/s","pattern":"[url:value = 'http://195.178.110.204/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e38bb67-1e67-8b1e-853a-000096dd5778","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/u","pattern":"[url:value = 'http://195.178.110.204/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdae133-da8a-becf-add6-0000f338e72b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://160.119.69.4/x","pattern":"[url:value = 'http://160.119.69.4/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af8a1c7-e007-72ed-441d-000064ec3287","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/k.php","pattern":"[url:value = 'http://45.95.147.178/k.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4d566d-165b-bb2a-dade-000050f5dafc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/x","pattern":"[url:value = 'http://45.95.147.178/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e953f3-b216-097c-5237-00000bb4dcfe","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.107.139.197/WSW0","pattern":"[url:value = 'http://216.107.139.197/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abb0fff-d60d-ba5d-6537-000091c50702","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.155.8.56/WSW0","pattern":"[url:value = 'http://202.155.8.56/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7cbcb4-2d87-1d9a-e813-000027e2cf2b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm7","pattern":"[url:value = 'http://45.66.228.93/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1dc5ee-2a33-f589-c27c-00008281f7c8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_mips64","pattern":"[url:value = 'http://45.66.228.93/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264b2150-0b3c-6884-5c63-0000f55be6c3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm64","pattern":"[url:value = 'http://45.66.228.93/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f764bff4-9ca9-1575-fe7b-00006f398963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://65.99.181.12:49304/bin.sh","pattern":"[url:value = 'http://65.99.181.12:49304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dfe611-a891-da27-45a2-0000f7da1721","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.88.191.25:4472/i","pattern":"[url:value = 'http://88.88.191.25:4472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc16a5d-cf9d-ddd4-82d9-0000e3638969","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.83.87.122/run.sh","pattern":"[url:value = 'http://103.83.87.122/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa660add-2345-cf4d-1bef-00002f19cfd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/white_notepad_rcdata.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/white_notepad_rcdata.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d080ec-6ca9-e7bf-d772-0000e9de2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/34534.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/34534.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef3efe0-031a-9460-f413-0000a0c6d9a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/test.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/test.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--057c786f-6ac2-1756-640e-000009a8075f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/EC_puller.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/EC_puller.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d46da1-f12c-c535-6382-00007d2171fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.36/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b926d0-9613-cf3e-6907-0000089cf873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b44ebb-1876-ab8e-6730-00009f8b4145","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c62796-c55b-db1f-d095-0000a52a546f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.245/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4e10ef-605f-1597-49f6-00008d6eacc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/yl2g3svth10bgzd/file","pattern":"[url:value = 'https://www.mediafire.com/file/yl2g3svth10bgzd/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc02676d-718f-efb9-34ad-000070cb812d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.196.221/main_arm7","pattern":"[url:value = 'http://87.120.196.221/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7801392-27d3-0a83-28eb-000086b6eb25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update","pattern":"[url:value = 'https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943ab489-cf26-32c2-b411-00005c37d73b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi","pattern":"[url:value = 'https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702b61ca-ce18-5859-b156-0000b814f5ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi","pattern":"[url:value = 'http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be91e69-7add-cfc9-d4ae-0000bee7d089","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.128/bins/c.sh","pattern":"[url:value = 'http://31.77.227.128/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f62a06-0472-38d3-04c0-0000cb4ea22e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/dodu","pattern":"[url:value = 'http://213.177.179.11/dodu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03630d9-c19a-13a3-6b4b-000066d2e89b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.5.60:34419/i","pattern":"[url:value = 'http://110.37.5.60:34419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91549e80-ae58-715c-cb10-000096876cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/i","pattern":"[url:value = 'http://125.43.35.24:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329a8b59-01b9-a67a-938e-00005fb66b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/bin.sh","pattern":"[url:value = 'http://95.155.201.65:38304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54ed1e-f67b-1aed-37c2-00006518d395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/bin.sh","pattern":"[url:value = 'http://95.56.232.109:37061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4ca38-f27c-bae1-c9fd-00003ea0a9e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://81.227.43.110:42887/bin.sh","pattern":"[url:value = 'http://81.227.43.110:42887/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ded292-87d4-f1da-7006-0000d884711e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.12.46:51362/i","pattern":"[url:value = 'http://182.119.12.46:51362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880a31bf-9383-1944-fe92-00001cfc12a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.88.136.194:55285/i","pattern":"[url:value = 'http://36.88.136.194:55285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288cb3f6-562f-22ec-70e3-00006ed97894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/i","pattern":"[url:value = 'http://110.39.231.36:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc1c637-21bb-0c3d-dffd-0000a49134be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:38213/bin.sh","pattern":"[url:value = 'http://110.36.1.200:38213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fcfc4-c5c9-4682-a309-000098d49d75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/bin.sh","pattern":"[url:value = 'http://223.108.82.26:47552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41328f86-4c05-31ba-7db7-00006502f7d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://204.244.176.203:60318/i","pattern":"[url:value = 'http://204.244.176.203:60318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d373e04c-4ae1-97e8-463b-00001a84e2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.236.63:53748/i","pattern":"[url:value = 'http://27.207.236.63:53748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf4f226-c9fc-8044-7d2b-000054ecca2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/i","pattern":"[url:value = 'http://223.108.82.26:47552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78e8006-3255-65a9-e2c9-0000c1780f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.89.147:43414/i","pattern":"[url:value = 'http://115.50.89.147:43414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8a97cf-c4ca-1b37-01b9-00005de8e20b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/i","pattern":"[url:value = 'http://95.56.232.109:37061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5a36d7-ae69-7754-619b-00007e124f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.222.47.36:58453/bin.sh","pattern":"[url:value = 'http://27.222.47.36:58453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f995119-bee2-80d2-990f-0000cdf29a9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://68.65.100.46:46734/bin.sh","pattern":"[url:value = 'http://68.65.100.46:46734/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd168a7-9319-8f9a-4c93-000074b10dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/i","pattern":"[url:value = 'http://42.177.186.117:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b210d28b-17c1-7977-38ef-0000b7af0684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/i","pattern":"[url:value = 'http://125.44.212.22:49662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb2f98e-bf4e-41ad-a3e2-0000ffccfb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/bin.sh","pattern":"[url:value = 'http://123.170.100.105:42942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b5c09e7-bb00-64c2-64cd-0000ebc42566","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/i","pattern":"[url:value = 'http://59.58.42.82:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70a4e78-5fc0-78b9-1b3d-000020bbf764","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/i","pattern":"[url:value = 'http://112.109.219.147:35136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6704ad23-be71-672f-e3d2-0000d2b9bbcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/i","pattern":"[url:value = 'http://182.116.9.201:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2c0784-f859-515c-80b8-00006fd30c8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.37:32825/i","pattern":"[url:value = 'http://42.230.157.37:32825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daf83d9-4a10-ab81-b9c4-000020e93eed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/i","pattern":"[url:value = 'http://222.139.198.215:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473b733a-1c42-5947-b973-00006893e6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/bin.sh","pattern":"[url:value = 'http://42.232.226.240:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c8f72c-9279-c4cf-470b-00000b63c7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/i","pattern":"[url:value = 'http://42.228.252.188:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fd93bc-568c-4a0a-cbc2-0000a1521542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.182.221:40037/i","pattern":"[url:value = 'http://123.14.182.221:40037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874095b0-1dbe-fb19-c75f-00004bc284f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/bin.sh","pattern":"[url:value = 'http://78.26.18.38:48086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2902ca3c-46ac-96d6-9b70-0000061c079b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/i","pattern":"[url:value = 'http://42.55.138.49:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4ab16e-123e-f347-7b6e-0000dde894b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/i","pattern":"[url:value = 'http://39.90.145.143:54042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6bc2f-e0f8-04be-bbdd-0000e0a7d2db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/i","pattern":"[url:value = 'http://27.207.139.137:59758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56a0326-13a5-9f59-4898-00004efca4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:35406/bin.sh","pattern":"[url:value = 'http://119.179.214.25:35406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc169a74-2169-3cc0-b7fb-0000d8f4521f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.152.37:45005/i","pattern":"[url:value = 'http://115.58.152.37:45005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f969f88-6e8b-baa8-febb-0000f4e5af7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/bin.sh","pattern":"[url:value = 'http://27.215.126.192:55352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af811b5-0424-8f47-3395-0000d75c2061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/i","pattern":"[url:value = 'http://115.58.130.246:33076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8243fbd7-d7f8-7775-9733-0000642d4ec5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/bin.sh","pattern":"[url:value = 'http://182.116.9.201:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbffa45-84e0-775f-24d5-000037aaad53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/i","pattern":"[url:value = 'http://113.228.149.193:49576/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58ec7c2-121a-53cd-5aa7-0000e8e6e8db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/bin.sh","pattern":"[url:value = 'http://182.126.81.119:38169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc54e5d3-56d9-403f-6853-000034b65c5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.239.253:57738/bin.sh","pattern":"[url:value = 'http://110.39.239.253:57738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586343cb-d7a2-fe18-b88c-000066631073","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.130.126:36331/i","pattern":"[url:value = 'http://119.183.130.126:36331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b674a0b8-b908-eeb1-3d5a-0000c654e37c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.95.98.66:8012/linux","pattern":"[url:value = 'http://210.95.98.66:8012/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b197a64-f6ce-99fa-875e-00000a131f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/i","pattern":"[url:value = 'http://110.37.84.212:34554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac752a07-ca37-02c4-39b5-0000be3d1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/bin.sh","pattern":"[url:value = 'http://42.55.138.49:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e23c-800f-dce7-ba64-0000e7272af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.92.171:60432/bin.sh","pattern":"[url:value = 'http://42.231.92.171:60432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086299e2-7ecc-177f-8314-00005d2f704f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/i","pattern":"[url:value = 'http://78.26.18.38:48086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5732a0-3255-531b-f6fe-000035718803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/bin.sh","pattern":"[url:value = 'http://110.39.231.36:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f7c57b-e2c2-6a34-1207-00003986860c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/i","pattern":"[url:value = 'http://182.121.144.189:60356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b55b145-b38a-7558-dc99-000064f8303c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/i","pattern":"[url:value = 'http://182.126.81.119:38169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cb8976-98a8-69f1-4d5f-000042fd6971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.252.36:36560/bin.sh","pattern":"[url:value = 'http://42.239.252.36:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1628a5bc-7adc-59a8-7634-0000def7a29a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/bin.sh","pattern":"[url:value = 'http://125.44.212.22:49662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9860d4-5447-1aac-e98e-0000e5dfa8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.154.251:35768/bin.sh","pattern":"[url:value = 'http://124.131.154.251:35768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8675a7-15c2-0425-9a1d-00007ed2a5c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/i","pattern":"[url:value = 'http://125.41.8.245:37624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e28ec61-6887-f52b-e9f7-00007a1df0fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/bin.sh","pattern":"[url:value = 'http://27.215.212.219:39234/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca99e15-a15c-144e-2a6e-0000ae539841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/bin.sh","pattern":"[url:value = 'http://108.168.0.60:36003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9645ab99-8851-57b5-cc4e-00004df1167a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:35077/bin.sh","pattern":"[url:value = 'http://210.208.110.20:35077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3331af8c-2c9c-243d-6bb3-000064180765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:41323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a155a8a-2b30-4ec1-cda8-0000355d8a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/bin.sh","pattern":"[url:value = 'http://222.139.198.215:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72c471b-2f88-7880-1a81-000069e5bcf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/bin.sh","pattern":"[url:value = 'http://115.58.130.246:33076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee11c422-2a67-36da-09ea-00000a99e576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.169.3:39736/bin.sh","pattern":"[url:value = 'http://42.87.169.3:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0236e05-f6d4-322b-d35d-0000aba4b0ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:51370/bin.sh","pattern":"[url:value = 'http://221.1.226.175:51370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63e6f04-33e4-55d9-5bc6-0000d07b8767","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.90.244:47446/i","pattern":"[url:value = 'http://221.15.90.244:47446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d741f2-cd4a-b293-e8d1-0000b3e3dbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/i","pattern":"[url:value = 'http://89.189.181.54:34451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5307589-63e8-1bd2-eac3-00006e03d81b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/bin.sh","pattern":"[url:value = 'http://175.175.215.229:57947/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa06f17-142a-3d48-2d77-0000d9ac24e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.209.101.105:37817/i","pattern":"[url:value = 'http://221.209.101.105:37817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a0e3f6-0044-eef9-da00-0000e6ba49ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.51.204.238:50663/bin.sh","pattern":"[url:value = 'http://58.51.204.238:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2351ca65-eb97-893c-12db-0000971312e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/i","pattern":"[url:value = 'http://115.61.120.117:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a228ea9a-0087-ff76-65ed-000095d6cbb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.31.157:39851/bin.sh","pattern":"[url:value = 'http://42.224.31.157:39851/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b653a00e-9078-4f79-62fe-0000a28dd4b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/i","pattern":"[url:value = 'http://182.113.205.38:37725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dc7e17-54c8-b343-4eff-0000d3c63abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/bin.sh","pattern":"[url:value = 'http://110.36.80.162:46146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d1c874-eea4-896d-db20-000055793a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/bin.sh","pattern":"[url:value = 'http://182.121.141.220:34479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--122ee7c0-8b75-785d-4018-0000a830bb18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.108.27.91:45906/bin.sh","pattern":"[url:value = 'http://91.108.27.91:45906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71d815e-0e82-d0f0-e761-0000d3ca8300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/i","pattern":"[url:value = 'http://42.225.228.107:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e5a8ee-e2b8-bc15-c920-0000e1b498ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.174.185:43822/bin.sh","pattern":"[url:value = 'http://219.154.174.185:43822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3842b541-587d-c694-1921-0000844ed820","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.203.254:46174/bin.sh","pattern":"[url:value = 'http://123.190.203.254:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c263d5e1-f13e-8e93-ecb9-000074a2fe43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.54.177.157:60692/bin.sh","pattern":"[url:value = 'http://42.54.177.157:60692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd4fd15-bffc-67fb-1c0a-0000ce37ad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/i","pattern":"[url:value = 'http://42.180.11.230:34276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7ef819-b091-629a-c7cd-00008c59eac1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/i","pattern":"[url:value = 'http://95.155.201.65:38304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f6fa22-76d9-cee4-797c-00007532893d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/i","pattern":"[url:value = 'http://27.215.212.219:39234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d415eb39-bbe7-7071-c1b9-00000f9b55a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/bin.sh","pattern":"[url:value = 'http://42.225.228.107:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc12c11-1a4a-5296-2cd5-00003cc015cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.107.63.26:8127/linux","pattern":"[url:value = 'http://47.107.63.26:8127/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea798a1-055c-b88e-d422-0000dde6440e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/i","pattern":"[url:value = 'http://27.215.126.192:55352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432cc46e-7641-2d1e-71fb-00002b71dd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.49.47:47425/i","pattern":"[url:value = 'http://219.157.49.47:47425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426708ec-97c6-7598-e0cc-00004f8112db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/i","pattern":"[url:value = 'http://182.121.141.220:34479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb08f0d-8b04-73ac-6112-00008bd4e12a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/i","pattern":"[url:value = 'http://175.0.62.242:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032703bc-3b0c-6ef4-0413-0000b615a471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/i","pattern":"[url:value = 'http://42.232.226.240:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58217655-07d9-4166-3492-0000ab0d6783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/i","pattern":"[url:value = 'http://110.36.80.162:46146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd309c4-aba2-ec0e-91a8-0000acc84389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/i","pattern":"[url:value = 'http://175.175.215.229:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3526726d-b771-b7f7-08f9-00007b7d8361","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/bin.sh","pattern":"[url:value = 'http://110.37.84.212:34554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c27f7b-6f51-6059-6607-0000711f04a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/bin.sh","pattern":"[url:value = 'http://175.0.62.242:40182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27f6de5-3820-2070-314c-00004bb62e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/Mozi.a","pattern":"[url:value = 'http://183.23.139.207:35951/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801acb44-e98c-6187-9048-0000568997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/bin.sh","pattern":"[url:value = 'http://115.57.199.157:51293/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8bde2f-2abb-aa1f-bb65-0000a2b6f6c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.245:54758/i","pattern":"[url:value = 'http://115.48.148.245:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9573221e-3af6-2d00-f961-00008c70ade7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/i","pattern":"[url:value = 'http://42.179.152.19:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f02b749-2153-d5c8-d7ee-0000ceb7aaed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/bin.sh","pattern":"[url:value = 'http://124.131.53.180:42721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7c9aa8-f59c-164b-e631-0000f100167f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.85.180.51:37572/bin.sh","pattern":"[url:value = 'http://42.85.180.51:37572/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84eabae9-1b76-5a3a-aa0a-00000cb0e351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/i","pattern":"[url:value = 'http://156.146.24.110:51345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612b68af-50ff-a226-d1c6-000027ca477d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/i","pattern":"[url:value = 'http://167.250.158.32:40802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e2328c-c56b-d255-67ee-0000bf2d70ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/gots","pattern":"[url:value = 'http://213.177.179.11/gots']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bcd508-1ce3-820c-d7d5-0000c4fdda5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.93.190:47055/i","pattern":"[url:value = 'http://123.14.93.190:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79002155-de1d-6a4b-c7be-0000129ebc6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/bin.sh","pattern":"[url:value = 'http://125.43.35.24:55742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace6723c-45e7-9de8-4ba8-00008d6705cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:45429/bin.sh","pattern":"[url:value = 'http://27.204.233.111:45429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c1752d-a6b8-9a69-ecd2-00007ac8efea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/bin.sh","pattern":"[url:value = 'http://39.90.145.143:54042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cabaf6-3ab4-3c84-3075-000020a42758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/bin.sh","pattern":"[url:value = 'http://182.121.144.189:60356/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9370e9c6-2268-50c3-04f6-0000beed9656","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/i","pattern":"[url:value = 'http://210.208.111.220:51409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e902618b-af98-2a4d-555e-00008bfe8aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/i","pattern":"[url:value = 'http://124.131.53.180:42721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096cdd7b-7bea-12d0-01c2-0000dc405437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.223.220:38837/i","pattern":"[url:value = 'http://180.252.223.220:38837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c5f737-5cf7-8738-b14f-000065a1f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.129.253:43457/bin.sh","pattern":"[url:value = 'http://123.148.129.253:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7493333f-70be-3009-4aa8-0000462c40b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://8.138.19.119:9777/linux","pattern":"[url:value = 'http://8.138.19.119:9777/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb11c1b-ddd9-3f65-dfe1-0000be14d783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/i","pattern":"[url:value = 'http://117.26.226.42:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55299827-c7ef-2863-6dd3-0000325e8de0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/bin.sh","pattern":"[url:value = 'http://210.208.111.220:51409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaf24fd-e616-36da-bc68-0000feebfa08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://gray-dyane-31.tiiny.site/index.json","pattern":"[url:value = 'https://gray-dyane-31.tiiny.site/index.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf6e07d-d559-b72d-e381-0000a2ff1ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.83.31.27/main/pure.bat","pattern":"[url:value = 'http://45.83.31.27/main/pure.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51886f31-3e07-f0ee-38ef-0000d0d9b622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/pwcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/pwcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ffe0a0d-997b-e580-a00a-00005c44e133","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/img_043214.png","pattern":"[url:value = 'http://178.16.53.176/HTTP/img_043214.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5215a-e5af-78a1-6d9a-0000f2cccd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/crypted1.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338ada5b-a3d0-efe4-7605-0000e225c367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2ba57c-2e2d-1e5e-24d5-0000d6516539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9d0d11-a343-ea2e-103d-0000d2821d87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cb4a22-2bb7-c4ae-db8b-0000c99f6bdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b320519e-c10d-4a60-8cc5-00009b359c3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01672fc5-251a-f374-b6ec-0000a2d8dd92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7772b37a-a8cb-3dbe-5f01-0000dcf34534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfc2bea-26d5-981e-47f8-00009278533b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cacb83c-7dbe-bc02-ee38-00002a7b9255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3a8a18-1abd-d01a-349b-0000e1231e6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cd6af-1584-de88-07b3-0000e53161a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb6575-8a9e-a2d4-9631-0000e2751a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b167cf4-8f85-e293-c950-000031e51d32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189c2c22-0e50-799e-40e0-00000f3763f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afcff6fa-dd77-5174-33ae-000005182a1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d181c1-9be8-4f28-9eb4-0000b757f2c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a581c1ca-9eb6-25ee-b390-000020100324","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a661ef52-4c73-ad06-2ae1-0000781d013b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed761aec-6e01-cce7-cd2b-00005dc54255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aecdd26-841c-293c-2827-0000559c6a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffedcb4-38dd-42df-8c34-000041a946b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac3c65c-5bb9-21be-bb35-00000e1d7122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949d8595-5409-b76c-53ec-0000c7e4bcd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d510ca-8e33-c8c9-a6a9-0000d435627a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1954db1e-95f7-4fd7-7391-0000ec0442f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68da59df-9a36-9f87-d74a-00007fdcea1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e98d2e-6aa1-ad55-a5f1-0000915e9228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c24da40-a673-29b7-c493-0000c3380146","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65403786-f02f-c2a1-9a58-0000f715c35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0284d2-0678-3ced-973a-0000cb9a984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/cheat_X.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/cheat_X.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f9db90-a8a0-3712-3091-0000afc8ab15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ab6392-7257-db61-9352-000005356b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R6.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e309460-7d9f-d30b-e15d-00008f55f112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/hIEGQ.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/hIEGQ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a105b9-a66c-bd2a-47d6-0000e25fe7ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93903773-eea9-1292-824f-0000c2c9a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd05d0a-df19-f08d-b3f0-00007027314e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67317c84-d3c9-957e-71ed-0000c01ec055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d462a0d4-9694-37df-8a05-0000734d640b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fb2474-68e2-f087-d8c8-00007c094ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086e7fa1-c159-cd3a-a97b-00002e615b97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7f8918-9b5c-8727-7a4b-0000ccb8f8f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20591c2-d51e-3bef-0638-00007e6d48b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68690e4e-ba65-99fb-f611-0000249f117e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/muvaro.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/muvaro.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b578b3a-386e-226b-67ff-0000f0f2a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'http://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec02de0-4c32-ff2a-ccbe-0000e6da0ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/img_203145.png","pattern":"[url:value = 'http://107.175.88.87/22/img_203145.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f2f892-14b6-5216-d2e2-00008537d117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/img_201031.png","pattern":"[url:value = 'http://172.245.209.133/70/img_201031.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd79b9d8-d25e-2496-7578-00006b32fdb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta","pattern":"[url:value = 'http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e829e11-a95d-d40d-9094-000005e6c91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/DAD/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/DAD/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df009767-2ca6-f68a-de54-000087ee8409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/POT/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/POT/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80b72bc-d184-61fb-0937-0000b2e9809e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://effectively32.infinityfree.me/img_072806.png","pattern":"[url:value = 'https://effectively32.infinityfree.me/img_072806.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68918ac6-bb21-1f83-c224-000027307c27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05447cf-ffa0-8521-d4c4-0000bdbbd82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.103/sshd","pattern":"[url:value = 'http://94.154.43.103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a8a712-d4bc-56d2-3b22-0000d29f3343","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i686","pattern":"[url:value = 'http://94.154.43.236/exodus.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13c29da-7fbf-0e72-7878-00001f4116f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mips","pattern":"[url:value = 'http://94.154.43.236/exodus.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf36deeb-bb7c-1c9c-4d4e-000081c00728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sh4","pattern":"[url:value = 'http://94.154.43.180/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6366143-06cc-acff-7063-000035f6b9be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sh4","pattern":"[url:value = 'http://94.154.43.236/exodus.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d85feb-e110-24da-ddb5-0000e4ea6157","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv6l","pattern":"[url:value = 'http://94.154.43.180/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4a524a-b9d0-82db-351d-000097ffda0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm5","pattern":"[url:value = 'http://94.154.43.236/exodus.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee194b-289a-422c-1c2f-0000540b41ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i586","pattern":"[url:value = 'http://94.154.43.236/exodus.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc36eaa-6024-e978-fce2-0000d98a48e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv7l","pattern":"[url:value = 'http://94.154.43.180/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4d62dc-6fbd-c625-1ad4-00002f43bd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm4","pattern":"[url:value = 'http://94.154.43.236/exodus.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650117c-7346-2673-d15e-0000912fa6e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sparc","pattern":"[url:value = 'http://94.154.43.236/exodus.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d101d0c-2a50-f6ce-2681-00001fb7c02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.m68k","pattern":"[url:value = 'http://94.154.43.236/exodus.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090802bf-4434-5dba-1c41-00000699163a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mips","pattern":"[url:value = 'http://94.154.43.180/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724303f0-7e80-199d-0b33-0000854a75e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm6","pattern":"[url:value = 'http://94.154.43.236/exodus.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef50c28-ab59-bbf5-da72-0000a34a1b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv5l","pattern":"[url:value = 'http://94.154.43.180/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05443366-6514-f2ac-1240-00003df61280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm7","pattern":"[url:value = 'http://94.154.43.236/exodus.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab50b080-28dd-a640-3fdf-00009aeda1c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sparc","pattern":"[url:value = 'http://94.154.43.180/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90047a3d-3593-a16e-5003-00000a786698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mipsel","pattern":"[url:value = 'http://94.154.43.180/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd62605a-d435-93dc-b1c4-0000531c85a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.x86_64","pattern":"[url:value = 'http://94.154.43.180/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ee3d69-8992-fd57-23c5-00009e2a3237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv4l","pattern":"[url:value = 'http://94.154.43.180/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83648314-8c5b-5e8f-7865-0000b5282048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.ppc","pattern":"[url:value = 'http://94.154.43.236/exodus.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65db5ec-e1f9-367b-b377-0000d8e61b68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.powerpc","pattern":"[url:value = 'http://94.154.43.180/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64eeef13-a164-ebf8-fb2d-0000744278bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mpsl","pattern":"[url:value = 'http://94.154.43.236/exodus.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed6b2da-79a5-797c-29e2-0000cd2b4e3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.x86","pattern":"[url:value = 'http://94.154.43.236/exodus.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45243669-ae20-579f-609b-0000066fc0e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.m68k","pattern":"[url:value = 'http://94.154.43.180/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3dec87-3335-65f3-197b-0000baafb874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a43ba3-0e2e-d780-59d0-0000c2412efb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://wealthishealth.free.je/img_234525.png","pattern":"[url:value = 'https://wealthishealth.free.je/img_234525.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f1c554-b463-f2a0-59f4-0000e3f422bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/SO_08072026.rar","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/SO_08072026.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d02273c-747d-d758-0c6a-0000edcc8a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bc95a3-f5d7-08f7-7e4a-0000e1a927df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://89.23.107.5/m/jscotbpl.dat","pattern":"[url:value = 'https://89.23.107.5/m/jscotbpl.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594bc740-897b-3073-cfda-0000e15911a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meridia.rs/filess/Teleg.exe","pattern":"[url:value = 'https://meridia.rs/filess/Teleg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0aa025a-9967-96ae-723c-00009168c67c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/steepleadmit.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/steepleadmit.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33c14e4-5dc0-e9f1-3ffa-00005b5c96a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/electricityjog.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/electricityjog.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5339bafb-a2f3-e40f-2daa-00000cc817f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12d7373-f11d-dccb-8426-0000e30ce526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3707c6ed-cf8e-254b-337e-00005688e301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232f9ec8-8b7d-5408-cb36-00002fd918b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a553b7c-161b-0cc2-5132-00008e2e9e53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/bin.sh","pattern":"[url:value = 'http://61.156.97.162:50385/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d281863b-d6c2-08fe-9660-00002b2ec376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/bin.sh","pattern":"[url:value = 'http://116.59.13.48:57768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b13cfef-ff68-3bb9-d296-00009e145807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/i","pattern":"[url:value = 'http://61.156.97.162:50385/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d52b82c-1e9d-cdd6-66c0-00006c58ee6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://yakult-hk.com/DDOS.zip","pattern":"[url:value = 'http://yakult-hk.com/DDOS.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f901d84-5166-2fbe-10ca-00001d290935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/bin.sh","pattern":"[url:value = 'http://123.14.185.19:44899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d3d92a-8e7f-ad05-11fc-00008e8c7bf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.118.111:40216/i","pattern":"[url:value = 'http://110.37.118.111:40216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7efad9f-4bce-0d59-1a73-000029258799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/bin.sh","pattern":"[url:value = 'http://159.255.7.120:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af4847e-48b0-0a9a-bda2-00004f266bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/i","pattern":"[url:value = 'http://123.14.185.19:44899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffe5662-b2fe-6363-8e3e-000009c17fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/i","pattern":"[url:value = 'http://116.59.13.48:57768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05604c9f-0a06-a06c-cc2f-00001347db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.17.189:45420/i","pattern":"[url:value = 'http://182.121.17.189:45420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef80b587-37f3-0da4-4587-000064069199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.8.131.222:37740/i","pattern":"[url:value = 'http://27.8.131.222:37740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d13a441-c90e-47a5-e4c4-0000cbfb9a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.10.99:39779/bin.sh","pattern":"[url:value = 'http://123.129.10.99:39779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2104c949-f85d-93e3-c0b7-000096685bde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/bin.sh","pattern":"[url:value = 'http://196.189.98.110:42979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bee8b584-9db8-83a3-aca9-00002529c6fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/bin.sh","pattern":"[url:value = 'http://123.14.181.142:56703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c461d1-cf0a-6de2-b8a7-000098d246b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/windows","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/windows']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--843a0d62-6bd4-3c61-2842-0000cc87fd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/linux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b44b8b-ccc5-ed59-b914-0000c69750b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/mac","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/mac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcb5055-5022-6350-420e-0000280cefa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/bin.sh","pattern":"[url:value = 'http://124.95.24.225:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f4e67a-1b92-9ffb-b72f-00001fe4ca60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/i","pattern":"[url:value = 'http://123.14.181.142:56703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4b338a-1c29-bf42-7724-00000db1261f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/bin.sh","pattern":"[url:value = 'http://222.137.25.131:51261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d136039-7b68-a96d-88fb-00003e8fb1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/i","pattern":"[url:value = 'http://124.95.24.225:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd47610-a5bb-1133-23aa-0000108b2e9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/bin.sh","pattern":"[url:value = 'http://125.41.8.245:37624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1ac36e-5551-65af-5ed3-0000ab8ade39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/i","pattern":"[url:value = 'http://222.137.25.131:51261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6d0d68-37d1-7b7e-0b86-0000341fbc92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/i","pattern":"[url:value = 'http://196.189.98.110:42979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c44b5-dd3e-3b61-ba27-0000dc9cfefc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.22.216:46217/i","pattern":"[url:value = 'http://110.37.22.216:46217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a85dba9-d603-e7de-5725-0000ddc14850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.24.27.232:57681/i","pattern":"[url:value = 'http://218.24.27.232:57681/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e6111d-5266-aa57-9bb9-0000fa381199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/i","pattern":"[url:value = 'http://110.36.72.194:41902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c144434-0255-cee8-dfca-000059db56c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/bin.sh","pattern":"[url:value = 'http://123.5.148.113:60247/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c15894-538a-7792-2e26-0000906d700c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/i","pattern":"[url:value = 'http://123.5.148.113:60247/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2e33b8-412f-fc49-fd25-000017868287","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/sc.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/sc.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--038d247f-8014-7ead-97ab-0000c93a74fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/exe.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/exe.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad608ac7-d472-139e-3c92-0000ec48d45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/6.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/6.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa73a8ec-5f8a-50ab-63ca-0000fb5c7af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--989207b4-ed8c-4e6c-1fbc-000067617755","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/oldboss","pattern":"[url:value = 'http://rippled.cleverpondky.com/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbc1f90-ca1a-d750-fec6-000006e80ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/checkmacos.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f646456c-fd1d-3b46-5528-0000a70a28f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traffaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab19061-0a6b-dbe1-a35b-00007044ede3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cliaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc084d49-e1c4-a01f-dbeb-0000c0314a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/proot","pattern":"[url:value = 'http://rippled.cleverpondky.com/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c31947-008e-81d4-c96a-000018cee44e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check1.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3250288-e292-7615-1fa3-00006262b9b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9a324c-78ce-1469-4631-0000705c1f0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto1","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887deef8-bfa9-f235-2299-0000a1e8b4ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cli","pattern":"[url:value = 'http://rippled.cleverpondky.com/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a0f0a-7f86-f03c-6b0a-0000d31e549e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.80.33:54187/Mozi.m","pattern":"[url:value = 'http://115.51.80.33:54187/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3882caac-751b-86ae-ae97-000016b73c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/Error84","pattern":"[url:value = 'http://rippled.cleverpondky.com/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66aa9fe6-414d-1863-776d-000099c335f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/wd1337","pattern":"[url:value = 'http://rippled.cleverpondky.com/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe714c3b-41bd-cb07-86b5-0000a7860e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/syst3md","pattern":"[url:value = 'http://rippled.cleverpondky.com/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d5db07-6789-3710-508a-0000654c69e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/nvidia.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a237eb2c-f9e2-c154-947f-0000c01675a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/boss","pattern":"[url:value = 'http://rippled.cleverpondky.com/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb4d701-995c-4224-2fff-0000f7c10b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/log","pattern":"[url:value = 'http://rippled.cleverpondky.com/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--216d0c82-27c4-c618-0c31-00008971d888","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traff","pattern":"[url:value = 'http://rippled.cleverpondky.com/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a130b84-13e1-89a4-ce05-000075006ecd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/bin.sh","pattern":"[url:value = 'http://124.94.125.230:34268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684b83df-858f-2db5-74e2-00008303645b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/package","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/package']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5271bd-ebf4-797e-65b4-00008ab1507e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstrap","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstrap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e2e217-5c70-a471-80c5-0000cf53e2a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quick-load.vercel.app/api/settings/env","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/env']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cca01b0-561b-aafe-0846-00005382a15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.12:50068/i","pattern":"[url:value = 'http://115.56.147.12:50068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c748cd43-8b24-d1ed-3d50-000080f91651","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.230.18.121:41849/bin.sh","pattern":"[url:value = 'http://115.230.18.121:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4995ac20-0c82-3e80-7aa2-00004eec9729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/bin.sh","pattern":"[url:value = 'http://42.87.190.196:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9701f0-24a2-c75d-6cc8-000036c201b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/bin.sh","pattern":"[url:value = 'http://110.36.72.194:41902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8428eac-3951-1b50-40f0-000019c6740b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/bin.sh","pattern":"[url:value = 'http://115.56.10.15:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3879d905-5504-dfca-e192-00008b9e30b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/i","pattern":"[url:value = 'http://42.87.190.196:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ad9130-e43b-0af1-8710-00001020c472","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/bin.sh","pattern":"[url:value = 'http://221.15.195.117:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890601e8-cbd6-5b23-059b-0000a3ff504b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/i","pattern":"[url:value = 'http://115.56.10.15:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e603698-37e0-11b8-132f-0000c3d85c55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/bin.sh","pattern":"[url:value = 'http://42.239.231.246:37689/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d056c7-d58f-7161-4e90-00000aa4ed3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/i","pattern":"[url:value = 'http://221.15.195.117:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198f5b41-0509-6dbe-35cd-0000a166b86e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/i","pattern":"[url:value = 'http://42.239.231.246:37689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a383ad-c692-acb3-54dd-00007aa7b27e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/bin.sh","pattern":"[url:value = 'http://222.142.223.175:57022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01609c-1688-3501-57df-000012855fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/bin.sh","pattern":"[url:value = 'http://182.116.88.229:47375/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85e272f-9d8b-3fd4-08c0-000091718a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.234.134:45451/bin.sh","pattern":"[url:value = 'http://182.122.234.134:45451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d738e191-08f6-e94d-680a-000067c0ed8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/bin.sh","pattern":"[url:value = 'http://175.151.217.170:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55ed7e1-e5be-43ba-d110-00001efcd0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.116.98:56771/i","pattern":"[url:value = 'http://124.94.116.98:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d01189-38ea-7fbb-1cd8-0000cf98940d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/bin.sh","pattern":"[url:value = 'http://196.189.68.239:60182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7993e-9037-f1a9-060e-00002f059a14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/i","pattern":"[url:value = 'http://123.10.146.56:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62187c11-7fad-453b-ea5e-000079742227","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/i","pattern":"[url:value = 'http://182.116.88.229:47375/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fcbe90-246b-fcfa-a04a-0000c728c07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e5500","pattern":"[url:value = 'http://130.12.182.77/main.e5500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e73b905-3c26-9256-d8af-00000eb6b23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32","pattern":"[url:value = 'http://130.12.182.77/main.mips32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--320a0fe7-c3b2-4e0f-1481-00003f967668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64r6el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64r6el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26044ea8-9eef-bf9e-1a0c-00004a8aefc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.m68k-68xxx","pattern":"[url:value = 'http://130.12.182.77/main.m68k-68xxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9f2ce9-6be9-98df-8957-00000bc44b36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe79f59-7904-8fb9-22f2-00005facb1c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/i","pattern":"[url:value = 'http://175.151.217.170:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c91903-d308-9233-3919-00008f88287f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparcv8","pattern":"[url:value = 'http://130.12.182.77/main.sparcv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b02dc1-71f3-25ac-2c02-00008f505008","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8","pattern":"[url:value = 'http://130.12.182.77/main.power8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3049117e-3d98-0596-bda8-0000f6c0dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e6500","pattern":"[url:value = 'http://130.12.182.77/main.e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098bbba0-94db-cc40-5aea-00005055351c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.ppc440fp","pattern":"[url:value = 'http://130.12.182.77/main.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a7107e-6056-4981-80e7-0000a869246e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r5el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r5el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc96da0-d322-bc52-8b99-00001fe5771d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.aarch64be","pattern":"[url:value = 'http://130.12.182.77/main.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecadcf8-aa50-bd35-e31c-0000199dc695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v4","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9983dc-f572-02e4-cd86-0000e9986928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-i7","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-i7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2277ab49-f638-ba5d-910a-000008af727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8le","pattern":"[url:value = 'http://130.12.182.77/main.power8le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae495b-ce81-507f-da57-0000844afe2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v3","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caae28f-49b7-3aaa-e855-00004454c207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1452997d-21a3-9b2d-edb8-00008db9bf32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64","pattern":"[url:value = 'http://130.12.182.77/main.x86-64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5999ca-c070-1241-f69e-0000da7a8ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-core2","pattern":"[url:value = 'http://130.12.182.77/main.x86-core2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e1ae27-5697-5e85-755a-00002efd56c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r6el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r6el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a979cd-8370-793a-49ca-00003cf69949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v2","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ab3a8-4f44-f491-9cb4-0000374e7d42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.s390x","pattern":"[url:value = 'http://130.12.182.77/main.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a54c80e-e5b1-2e44-4127-000091cda015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-i686","pattern":"[url:value = 'http://130.12.182.77/main.x86-i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5f63be-2794-4849-b380-00008eb2e27b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e500mc","pattern":"[url:value = 'http://130.12.182.77/main.e500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8691e00c-391e-3238-d498-0000241aec72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4aeb","pattern":"[url:value = 'http://130.12.182.77/main.sh4aeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404546d-d7a6-eed8-503f-00006dc34190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/f","pattern":"[url:value = 'http://130.12.182.77/f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d061a2d-d5db-a27a-dece-00009dadcf8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparc64","pattern":"[url:value = 'http://130.12.182.77/main.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1f20ed-a17d-d412-2a43-00004dc02f90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4musl","pattern":"[url:value = 'http://130.12.182.77/main.sh4musl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55cbdad-3a57-97bf-905c-000016604662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/i","pattern":"[url:value = 'http://196.189.68.239:60182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e025c85-5974-2a4b-b426-0000eb88efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/bin.sh","pattern":"[url:value = 'http://115.63.150.75:33073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d565b6-dc7d-3ca5-49dd-0000db967e01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/i","pattern":"[url:value = 'http://115.63.150.75:33073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987bb59-daf2-10e5-4420-0000e3f63108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/i","pattern":"[url:value = 'http://222.142.223.175:57022/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5961a06a-4045-2536-297f-00002584e626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/i","pattern":"[url:value = 'http://124.94.125.230:34268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16904ecc-cb8f-353d-88a6-0000f236db53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/i","pattern":"[url:value = 'http://123.4.234.31:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee54e51-7cb2-6cdc-aaa2-00002792756b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/bin.sh","pattern":"[url:value = 'http://105.186.140.157:48423/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4730c387-0294-c352-2b9f-0000d602fccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:36981/i","pattern":"[url:value = 'http://120.28.194.160:36981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bf6219-2c53-1847-7b53-0000eb947ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.246:46289/i","pattern":"[url:value = 'http://123.4.234.246:46289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b69ce9-899e-92c6-b48f-0000adb37db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.216:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea315355-85d9-a823-aaee-00005e49a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/i","pattern":"[url:value = 'http://105.186.140.157:48423/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551a6d3e-f5e9-053c-5cdf-0000f7b261f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/i","pattern":"[url:value = 'http://125.43.107.216:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962d0e14-c7c2-536c-00d9-000034053f6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.49:47371/i","pattern":"[url:value = 'http://125.43.0.49:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee49def8-1fd1-d4d3-3bb2-00005f1a768d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/bin.sh","pattern":"[url:value = 'http://119.186.208.189:49406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b005f-1eb6-6662-eff9-000019f3e520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mipsel","pattern":"[url:value = 'http://94.183.233.225/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1472d27d-e084-de72-fb2c-0000a55a0934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mips","pattern":"[url:value = 'http://94.183.233.225/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb7d455-fff6-d58a-93bc-00002e508f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/bin.sh","pattern":"[url:value = 'http://123.8.40.241:54434/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a16ab62-2f08-80ca-5a85-000006028ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86","pattern":"[url:value = 'http://94.183.233.225/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5903997b-107a-74d9-f1c3-00009558a2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm4","pattern":"[url:value = 'http://94.183.233.225/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159eaae2-eece-918b-6174-00001d4fab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_powerpc","pattern":"[url:value = 'http://94.183.233.225/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27d1a38-ad3e-2140-713d-00004097061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86_64","pattern":"[url:value = 'http://94.183.233.225/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70df857-cbd0-b1e1-8f8e-00003f516a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm6","pattern":"[url:value = 'http://94.183.233.225/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e04a9ed-f1d0-dfc7-d703-00002de4c5ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm5","pattern":"[url:value = 'http://94.183.233.225/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00ac8c1-7d65-1fb2-6de4-000087ed0d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm7","pattern":"[url:value = 'http://94.183.233.225/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0260513f-00fb-22a2-c766-00003553ea4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/i","pattern":"[url:value = 'http://123.8.40.241:54434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d696c51a-63fd-2e27-c071-00004a2676a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.67.222:54368/i","pattern":"[url:value = 'http://115.56.67.222:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489fc370-fd42-7a34-ff05-000020e027ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/i","pattern":"[url:value = 'http://219.157.10.128:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26285b0-ff7b-67a8-2db0-0000d460d706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/i","pattern":"[url:value = 'http://119.186.208.189:49406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cef7605b-1784-db8b-df5c-0000d2bb8829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/bin.sh","pattern":"[url:value = 'http://182.126.213.80:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af0f546-6f09-7774-7e69-0000541753a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/i","pattern":"[url:value = 'http://182.126.213.80:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--608dd15b-0589-fcf2-67fe-00009fb58f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/bin.sh","pattern":"[url:value = 'http://124.6.165.86:44671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da818090-4b04-5cd9-5af4-0000a859d679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/bin.sh","pattern":"[url:value = 'http://124.234.239.227:55577/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b384ca8-369b-0f93-a04d-000057d3f1da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/i","pattern":"[url:value = 'http://61.52.7.68:35582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15af8391-87fa-70a6-2e8b-00005e60e28d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/i","pattern":"[url:value = 'http://124.6.165.86:44671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da311577-0902-f285-b7cd-0000c3a3dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/i","pattern":"[url:value = 'http://119.109.140.49:40757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e43a256-dd89-362e-d4c2-0000efa3d9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/i","pattern":"[url:value = 'http://124.234.239.227:55577/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292cd8b9-e0e7-a9a7-3503-000045c0a3ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/molakc","pattern":"[url:value = 'http://178.16.54.109/molakc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a98c6c7-4a81-00d0-4381-000003e2ae5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.115.143:48808/i","pattern":"[url:value = 'http://182.116.115.143:48808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9251e248-ff89-dae1-2507-0000fadb6948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/bin.sh","pattern":"[url:value = 'http://182.113.2.97:36675/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f89076-ab0b-b9b1-8b9f-0000662da1ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/i","pattern":"[url:value = 'http://182.113.2.97:36675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af81952c-3175-0782-a77f-000053a8376c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/bin.sh","pattern":"[url:value = 'http://115.56.42.114:53571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e308fde-2a32-411f-65b0-0000e9a3e9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/i","pattern":"[url:value = 'http://115.56.42.114:53571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11778cd6-802b-718a-e331-000024253fe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/bin.sh","pattern":"[url:value = 'http://115.48.163.9:60317/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44f7615-5773-5106-2082-0000719da6e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/rew3rtghymrag7y/file","pattern":"[url:value = 'https://www.mediafire.com/file/rew3rtghymrag7y/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6b07a4-735b-7f5e-46f1-0000bf269eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5d7c6e-9122-54eb-07b6-0000206fb8ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.252.178.228/update1.zip","pattern":"[url:value = 'http://192.252.178.228/update1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f81e0ca-fb87-783e-081b-0000ac8f16fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://199.217.99.6/Troubleshoot.ps1","pattern":"[url:value = 'http://199.217.99.6/Troubleshoot.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b853ca9d-1fcf-be3d-2e5e-0000c2ca513f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41335f5-3ead-7b62-7452-000061f67729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9602e5b-4dc1-7b38-3196-0000d22aec32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a17c429-a0d8-2d31-9b3c-0000efafaf46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3cb5d9-bf2c-6c2a-5922-0000c0f36df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.386","pattern":"[url:value = 'http://92.5.66.49:8080/bot.386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04104d5b-13fa-4ac8-53e5-0000ccffa5d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9338921-1ffd-1877-2360-000098682bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.riscv64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29046e46-5a8b-d64c-542b-00007c7236c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46b1e21-7366-a615-9544-0000c3d8ee92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mipsle","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b60f4-dc73-3c84-1f7e-00008ffa0c42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1ee21e-6df6-740b-31fa-000074896776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.s390x","pattern":"[url:value = 'http://92.5.66.49:8080/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c359a16-21e4-7e1e-5f0f-000031c03c93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b3b4a-e495-0779-a546-0000cfa3f896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2199de09-5d49-dda2-f4a9-00006dcfbd71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/Mozi.a","pattern":"[url:value = 'http://221.15.226.18:57698/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b849b3-ecfe-a52c-335e-0000d76fcac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.amd64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73bc9a6-da76-d5ec-4459-000082b0e1a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/i","pattern":"[url:value = 'http://115.48.163.9:60317/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e834f52-29b6-397a-15f8-0000981e3e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/bin.sh","pattern":"[url:value = 'http://123.11.207.175:45931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de246fbe-3598-11f6-63ba-0000e5d005d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18332b81-360f-062a-580d-0000dd21a87e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e55fd5","pattern":"[url:value = 'http://5.182.210.174/e55fd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10179294-5d7c-b10a-29ed-0000cec838cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xkw","pattern":"[url:value = 'http://129.121.110.105/xkw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d118c4f7-c32a-f294-15bd-0000f807aa36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/759f0d","pattern":"[url:value = 'http://5.182.210.174/759f0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef0dc74-032e-2f34-2a6b-000037befdd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Y3P","pattern":"[url:value = 'http://129.121.110.105/Y3P']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b947860e-fff0-37d9-aa64-00007b8983e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2NXl","pattern":"[url:value = 'http://129.121.110.105/2NXl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fa6eca-9f02-6aba-9854-0000ce580be6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4f193","pattern":"[url:value = 'http://5.182.210.174/f4f193']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0469762f-5ec9-e86c-ade7-00008a6c43fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/783f2a","pattern":"[url:value = 'http://5.182.210.174/783f2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e3b52d-95e5-9330-3b2b-00006452790a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/99764f","pattern":"[url:value = 'http://5.182.210.174/99764f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ddad4e-15c0-8dbd-ff45-00006db989ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0eaa32","pattern":"[url:value = 'http://5.182.210.174/0eaa32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c38ad1-ef59-9bde-bf43-0000bb3cf9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/yx2w","pattern":"[url:value = 'http://129.121.110.105/yx2w']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f144b20-4309-c6e5-021c-0000c56c41e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/19e860","pattern":"[url:value = 'http://5.182.210.174/19e860']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597f1472-79d1-a79e-cf84-00004d174231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/lWC","pattern":"[url:value = 'http://129.121.110.105/lWC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4990e8-3df3-e657-7966-00002dc6b7f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Wqm","pattern":"[url:value = 'http://129.121.110.105/Wqm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67d809d-7b38-97c2-10d6-0000148afb01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6c209","pattern":"[url:value = 'http://5.182.210.174/d6c209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6c589f-5065-6af9-1cb4-0000345f4046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/747c0d","pattern":"[url:value = 'http://5.182.210.174/747c0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767a3800-f362-2b64-2c53-000053396101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fXd","pattern":"[url:value = 'http://129.121.110.105/fXd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231b461e-147b-f919-585e-0000ce88ea98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f39a8e","pattern":"[url:value = 'http://5.182.210.174/f39a8e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b02cc0-01e2-56a2-f2c7-000097890b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/704581","pattern":"[url:value = 'http://5.182.210.174/704581']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29cf242b-a3b5-14a2-82f9-00003a5dd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef363f","pattern":"[url:value = 'http://5.182.210.174/ef363f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a365d07c-cc3a-4716-d553-0000157d84f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/575708","pattern":"[url:value = 'http://5.182.210.174/575708']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78156e6-95f5-d1cf-aba6-00002f47a02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cd049e","pattern":"[url:value = 'http://5.182.210.174/cd049e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6244e8-7a67-dbca-a940-0000642e4e0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f91198","pattern":"[url:value = 'http://5.182.210.174/f91198']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1a35f-860c-6fc2-eecf-0000c1b1113c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/rG3i","pattern":"[url:value = 'http://129.121.110.105/rG3i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a090cb-2f28-bcde-cd82-0000ce1b1568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cf53f","pattern":"[url:value = 'http://5.182.210.174/6cf53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64ec990-b23e-d150-6df7-00008239fd08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/RzWf","pattern":"[url:value = 'http://129.121.110.105/RzWf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f236bbf-ec48-feed-ac48-00001e1a3fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f818ff","pattern":"[url:value = 'http://5.182.210.174/f818ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a6e08c-fe90-77a6-26a1-00007d9252ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/7uv8","pattern":"[url:value = 'http://129.121.110.105/7uv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced9603f-e6ce-37a8-6fe8-000041b3e61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xl01","pattern":"[url:value = 'http://129.121.110.105/xl01']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2d8e20-5277-dee0-7d47-00002ce4ea73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e8e811","pattern":"[url:value = 'http://5.182.210.174/e8e811']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e159841-73e6-2664-485f-0000516b468e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b0256","pattern":"[url:value = 'http://5.182.210.174/3b0256']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df249d2-3f07-36ba-c0ae-00000873c3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5b334","pattern":"[url:value = 'http://5.182.210.174/a5b334']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa1c95d-0729-d450-c8b7-00002bfb078b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/04e832","pattern":"[url:value = 'http://5.182.210.174/04e832']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e55471-5c73-799a-847d-0000aff2c936","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/C1iC","pattern":"[url:value = 'http://129.121.110.105/C1iC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad177a19-5269-d13b-e93b-0000b182c947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4vqU","pattern":"[url:value = 'http://129.121.110.105/4vqU']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848f2744-3cea-580a-ce38-000024274ce2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4yKQ","pattern":"[url:value = 'http://129.121.110.105/4yKQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b6dc14-600a-5f1a-fd1b-0000e0d6d2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8a320b","pattern":"[url:value = 'http://5.182.210.174/8a320b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f8686f-5d06-acb1-f950-0000a9bf5280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ot7","pattern":"[url:value = 'http://129.121.110.105/ot7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b074e0-a25f-b61c-2091-0000dda69ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/21a9d4","pattern":"[url:value = 'http://5.182.210.174/21a9d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d78c006-c648-bcd3-677d-000065df1701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/44e32f","pattern":"[url:value = 'http://5.182.210.174/44e32f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef4187c-5131-ca29-0e02-000091567ab8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstraplinux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstraplinux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842265f6-db53-1d73-5704-000088d5944e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc8b91","pattern":"[url:value = 'http://5.182.210.174/cc8b91']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25058f6e-114f-adff-74d4-00007a4ed3aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/80b16f","pattern":"[url:value = 'http://5.182.210.174/80b16f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeafc524-4fd2-2fd8-510f-00003bd6364e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/82c703","pattern":"[url:value = 'http://5.182.210.174/82c703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2303af9-64f9-4e8b-548a-00004d13e386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/924208","pattern":"[url:value = 'http://5.182.210.174/924208']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8d5afe-dec4-58a5-eb24-00009871516b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2ca244","pattern":"[url:value = 'http://5.182.210.174/2ca244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c3a833f-0138-ade9-c6b9-00000de3f575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7215c9","pattern":"[url:value = 'http://5.182.210.174/7215c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86263e16-bbae-70b5-b804-00007f15046a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fd89ab","pattern":"[url:value = 'http://5.182.210.174/fd89ab']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ebece3-31de-2f1a-fd1b-00009ac1ac92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fb21f1","pattern":"[url:value = 'http://5.182.210.174/fb21f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d54d1ab-702b-32fb-cc67-0000d57e96f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/690e95","pattern":"[url:value = 'http://5.182.210.174/690e95']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e284dc10-815d-5f2c-6c4b-00002f082b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/32441c","pattern":"[url:value = 'http://5.182.210.174/32441c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60efa7f1-28db-b373-59b0-0000918389ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/22393a","pattern":"[url:value = 'http://5.182.210.174/22393a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985b24d5-eacb-0904-aef3-00007265db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb5263","pattern":"[url:value = 'http://5.182.210.174/eb5263']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b13d90b-0acb-bb96-220d-00002c67954c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.243.228.138:53440/bin.sh","pattern":"[url:value = 'http://42.243.228.138:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--816a97a0-fdd0-eef8-40f2-0000be698cd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://114.227.48.185:58022/bin.sh","pattern":"[url:value = 'http://114.227.48.185:58022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28183dcb-a446-779b-e10f-00001008eccf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d83cda1-a89a-e1fd-1728-00002629090d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a9ad4f-644e-6616-4e2d-00003b1356bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211c1f-a35f-93d0-e44b-00004912ec9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://citrusmangos.ct.ws/img_112634.png","pattern":"[url:value = 'https://citrusmangos.ct.ws/img_112634.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3c6733-7904-3255-8129-0000d7889f7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e988b3-ccd3-bb18-19cc-000019e24dfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428f67c5-42d9-b25c-cb9f-000034a97296","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/quis.exe","pattern":"[url:value = 'http://91.92.47.8/quis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e56624-23fc-5d47-aa5d-000028f57106","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/CW.exe","pattern":"[url:value = 'http://91.92.47.8/CW.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d340a48-2a28-98d7-7bdd-000051a48594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/bin.sh","pattern":"[url:value = 'http://221.235.197.3:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fbfacb-b40a-0bc2-ee3e-0000adb01e15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f261eba8-c59a-58a3-f20a-0000a422326d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebba93d-87c7-853e-1dde-0000fbb35ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.79.201:45777/i","pattern":"[url:value = 'http://42.226.79.201:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dfeabe-2b1e-25fd-7512-0000894b4244","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19855277-1be8-77c9-6db8-0000b097731b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219915ba-a1fd-35ca-48e1-000082d9f3bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3d6b69-3946-1eee-61b4-00006d114b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4daec17a-5910-2ce9-1b9c-00004e9fc085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/i","pattern":"[url:value = 'http://221.235.197.3:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fbe47-2484-c431-be47-000050346012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d22fcd-abab-8a72-82fa-000017c0cb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/bin.sh","pattern":"[url:value = 'http://221.15.204.212:38964/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c64cfef-cdde-9c0b-0893-00005075bc7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7524844-2fc7-830a-fc1c-00003e2095c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59153ed6-b70f-e551-93b7-0000516af3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f590799f-4eeb-d2f5-e33a-00000ccbeb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d210b2e-ec14-5207-53b1-00006938e79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.185.120:41148/i","pattern":"[url:value = 'http://115.63.185.120:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fc112d-0312-6ba0-7318-000023310d3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/i","pattern":"[url:value = 'http://110.37.106.148:49825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77246e53-aebd-fbb2-990c-00005df177c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6a86a9-60c3-8942-9555-0000e2619495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/i","pattern":"[url:value = 'http://42.237.82.34:58954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf0210a-6370-270f-dcd3-0000c8c327dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/bin.sh","pattern":"[url:value = 'http://42.237.82.34:58954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64455cc3-c896-9d1d-8a2a-00007727ca94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c7a26","pattern":"[url:value = 'http://5.182.210.174/2c7a26']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50b032a-d411-cb8e-5feb-00007d530c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a59ff","pattern":"[url:value = 'http://5.182.210.174/1a59ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12433559-5776-eabf-d4c4-0000daff821f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/155a79","pattern":"[url:value = 'http://5.182.210.174/155a79']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65065a-4fe9-52a8-0846-0000fedfdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35c40c","pattern":"[url:value = 'http://5.182.210.174/35c40c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d759de5-eaf5-01ff-59de-0000bfdf262c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b136a3","pattern":"[url:value = 'http://5.182.210.174/b136a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6ca626-c21c-0218-05e9-000074ef490e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2419f5","pattern":"[url:value = 'http://5.182.210.174/2419f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f5a66b-1cef-bdc1-8854-0000857e7cf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07aedd","pattern":"[url:value = 'http://5.182.210.174/07aedd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85851043-f05a-2778-50ab-000051ba134c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b63d70","pattern":"[url:value = 'http://5.182.210.174/b63d70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32951ab-583e-0f66-eba0-0000c0490385","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/60689f","pattern":"[url:value = 'http://5.182.210.174/60689f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09991385-cddf-1dba-bb40-0000fbb4f6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d77667","pattern":"[url:value = 'http://5.182.210.174/d77667']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe113ad-ba33-6d78-6c48-0000933418be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c3474","pattern":"[url:value = 'http://5.182.210.174/0c3474']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec6806e-61af-7d12-db1a-0000ffbb5c04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a4b8b","pattern":"[url:value = 'http://5.182.210.174/4a4b8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ea3f9e-1dfc-9b01-5276-00001bfaf1db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/i","pattern":"[url:value = 'http://221.15.204.212:38964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502fcb55-9012-cc9a-88ce-00001dde9a79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/i","pattern":"[url:value = 'http://123.11.207.175:45931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0589fdc-bf28-6f5d-5b19-0000e38cc619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.22.108:50309/i","pattern":"[url:value = 'http://123.12.22.108:50309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a804d4-c99c-7af4-4f19-0000c2973624","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/bin.sh","pattern":"[url:value = 'http://182.113.205.38:37725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a6af18-c2fc-87bc-9029-0000f069118e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/bin.sh","pattern":"[url:value = 'http://182.114.243.24:39493/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3feef34-8de5-057c-f10a-000054f73819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/i","pattern":"[url:value = 'http://182.114.243.24:39493/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--225ba1e5-6eff-a600-4f33-000010fa5213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/bin.sh","pattern":"[url:value = 'http://112.248.190.70:45710/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de13ddc-262f-720d-2a69-0000cd0013f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/bin.sh","pattern":"[url:value = 'http://123.11.10.99:56358/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fd9874-2340-d09e-3b5b-0000dd1a0b94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/i","pattern":"[url:value = 'http://112.248.190.70:45710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fa0db6-aa88-a65f-7475-0000dd63a215","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/bin.sh","pattern":"[url:value = 'http://182.122.195.212:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ba0179-bdcc-7e3a-fc30-00009df97da5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/bin.sh","pattern":"[url:value = 'http://123.5.83.209:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6870ffd3-5f10-4ade-43f6-0000b89842e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.25.235.194:33174/i","pattern":"[url:value = 'http://112.25.235.194:33174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ae65fb-98a5-1fc9-fd8a-00006403c8b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/i","pattern":"[url:value = 'http://108.168.0.60:36003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed06863-06e6-df95-a900-000095100332","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/bin.sh","pattern":"[url:value = 'http://123.10.146.56:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170aa561-ced9-324f-5ef9-00008ec6451c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/bin.sh","pattern":"[url:value = 'http://110.37.58.92:44731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb2d97a-f1d9-aa2b-813b-0000d88504b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.224.216/zedx","pattern":"[url:value = 'http://147.182.224.216/zedx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd97d33-c307-212a-3604-0000b7c57383","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/i","pattern":"[url:value = 'http://113.228.117.193:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643c5870-8f61-34cd-adaf-0000fd8a8641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:48412/bin.sh","pattern":"[url:value = 'http://210.208.111.26:48412/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d61dfe5-ba94-fb05-e9cf-0000674adf66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/i","pattern":"[url:value = 'http://144.48.123.149:50607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2484efb9-47ac-d0f5-5e24-00000dca280f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/bin.sh","pattern":"[url:value = 'http://31.173.12.38:48285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab5a5e2-7af6-976d-8fe1-0000366b4e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/bin.sh","pattern":"[url:value = 'http://27.207.139.137:59758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c543583a-a320-6b06-fcfe-0000403de25b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/i","pattern":"[url:value = 'http://159.255.7.120:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fb8a8-1523-e798-2e80-0000f4d521eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:58204/bin.sh","pattern":"[url:value = 'http://27.206.197.243:58204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f280d46-5be4-13c3-fae5-0000007a62e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://190.109.228.177:37896/i","pattern":"[url:value = 'http://190.109.228.177:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9298b1-d5eb-d2a9-590b-0000977323df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/i","pattern":"[url:value = 'http://42.225.206.253:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd702ff-8244-68e3-e97e-0000606f544b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/i","pattern":"[url:value = 'http://219.155.193.230:59136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed10f80-78f9-4d62-c210-0000630fa08d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/bin.sh","pattern":"[url:value = 'http://119.179.214.25:37703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac17854-fc76-7faa-d162-00009446c220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.132.158:59339/i","pattern":"[url:value = 'http://115.48.132.158:59339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4f99e6-957e-f67b-8875-00001ff984a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/i","pattern":"[url:value = 'http://115.57.199.157:51293/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfe7d40-cbb5-d8fe-7ab9-000044781063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/i","pattern":"[url:value = 'http://182.117.9.81:37641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff368be-4aec-2002-832a-0000b226d452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/i","pattern":"[url:value = 'http://216.249.4.20:36657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67ccad3-1174-8942-864c-0000131fcca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/bin.sh","pattern":"[url:value = 'http://123.12.225.205:41540/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed1b394-22b9-7cbe-d9d3-000030504a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.236.158:50588/bin.sh","pattern":"[url:value = 'http://119.179.236.158:50588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad69af17-e0c1-a5dd-e1da-0000f0ee892c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/bin.sh","pattern":"[url:value = 'http://123.14.54.13:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b92de8-1b9d-993b-08fb-0000c11095f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/bin.sh","pattern":"[url:value = 'http://125.110.46.203:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815c508a-fa42-1757-3a98-0000c0b29bf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/i","pattern":"[url:value = 'http://61.53.92.34:34684/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025b1293-8b3e-1c20-ad54-00008f6ebbaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.212.236:37136/i","pattern":"[url:value = 'http://182.113.212.236:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbb3c34-5370-f14b-17e7-0000f8541be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/i","pattern":"[url:value = 'http://182.116.70.209:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ec639b-93b6-2b60-ab7d-0000e25c841e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/i","pattern":"[url:value = 'http://210.208.110.4:37718/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--969296fb-d859-8111-f385-000074fd06fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/i","pattern":"[url:value = 'http://221.15.4.237:59213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845e1b1b-ea69-0759-6c85-0000c1e0bed2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/bin.sh","pattern":"[url:value = 'http://123.10.238.107:36973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e17954-3f45-79c7-09cc-0000b633d3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.41.232:60566/i","pattern":"[url:value = 'http://42.235.41.232:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3070d3-4dbf-c679-0dd0-0000725f8703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/bin.sh","pattern":"[url:value = 'http://210.208.110.4:37718/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d483b45-166c-a780-de38-0000c6922c02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.38.151:38535/i","pattern":"[url:value = 'http://115.59.38.151:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bfa2b2-e9e6-93fe-9ca3-0000f5431f07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.96.94:38510/i","pattern":"[url:value = 'http://123.9.96.94:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2c0c2a-b574-e93b-606f-00005fc1a53b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.68.42:46437/i","pattern":"[url:value = 'http://123.11.68.42:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914b72e1-e681-f507-4cb2-0000a0517cc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/i","pattern":"[url:value = 'http://125.26.202.172:59746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbd2c0b-4589-4ba9-03e9-000074c20ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/i","pattern":"[url:value = 'http://182.119.183.1:55955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84e6e09-f0c9-d50a-052d-000091bd5457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/i","pattern":"[url:value = 'http://222.134.172.2:44618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56719105-ac00-bba3-a3e5-0000bde57de2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.70:45805/i","pattern":"[url:value = 'http://110.37.89.70:45805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a4c85b-c1d1-0d8a-d469-00004607be29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.212.105:46118/i","pattern":"[url:value = 'http://125.46.212.105:46118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9207db1f-ff0d-729d-ecb8-00001fa42806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.168.124:55125/i","pattern":"[url:value = 'http://115.56.168.124:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17dfa324-a5d7-8452-f907-000058748bea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.16.143:54649/i","pattern":"[url:value = 'http://110.36.16.143:54649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2f8925-7f92-1925-288b-00008b60df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/bin.sh","pattern":"[url:value = 'http://219.155.193.230:59136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3e328-c0cc-19c5-4f85-000093cf519e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/bin.sh","pattern":"[url:value = 'http://61.53.92.34:34684/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8ce6ac-07c6-8f9b-c88b-0000c83e7a51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.166.115.199:56157/bin.sh","pattern":"[url:value = 'http://175.166.115.199:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a7d93d-c4e8-ad2d-f91a-0000c08d7b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.104.0:41525/i","pattern":"[url:value = 'http://110.37.104.0:41525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a07390e-25c4-66f2-0a48-00006e087087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/bin.sh","pattern":"[url:value = 'http://156.146.24.110:51345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed72f272-eaf1-372e-1099-00003b826a52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.50.100:43521/bin.sh","pattern":"[url:value = 'http://42.237.50.100:43521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edda8851-7640-6b93-5400-00000c54284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://200.115.102.2:57794/i","pattern":"[url:value = 'http://200.115.102.2:57794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e73ca-e6c6-5c16-f79a-00007bebc298","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.97.247:34050/i","pattern":"[url:value = 'http://115.63.97.247:34050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d059e9-32fd-af78-84f8-0000bfef9a9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.44.180:33342/i","pattern":"[url:value = 'http://42.227.44.180:33342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f118439-cc4d-6623-9eb0-0000ea93e603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/i","pattern":"[url:value = 'http://125.47.244.3:55442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d553f7d1-bcaa-beba-4e89-0000d1a26d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.255.227:42646/i","pattern":"[url:value = 'http://110.39.255.227:42646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b209c8-658c-7421-5b62-00009f67ebaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/i","pattern":"[url:value = 'http://42.230.47.176:47866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c2251f-87fe-e343-1268-00007e95d2c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/i","pattern":"[url:value = 'http://109.236.44.113:59714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18fc7b1-1a6c-e2d8-b077-0000c9560e00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/i","pattern":"[url:value = 'http://219.157.212.157:59656/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c38611-0c22-86cb-807d-0000862620dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/bin.sh","pattern":"[url:value = 'http://182.117.9.81:37641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5164455d-629f-749f-9b08-000057c3e61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.219.168:39833/i","pattern":"[url:value = 'http://123.14.219.168:39833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d74fe0b-cad6-a9a0-42a0-00002574d334","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.58:39112/i","pattern":"[url:value = 'http://110.36.25.58:39112/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc97d97-50fd-8287-7eeb-00007403968b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/i","pattern":"[url:value = 'http://123.173.86.99:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cadea4f-39a8-29c7-c6e4-000083464b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/bin.sh","pattern":"[url:value = 'http://123.12.79.182:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa365450-5767-565a-a614-000089a7667d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/i","pattern":"[url:value = 'http://105.184.49.165:53813/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--967a51f3-29fb-e7a0-4338-000050847c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/i","pattern":"[url:value = 'http://42.53.22.56:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7906b6a2-b3af-4ade-3aac-0000757660d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/bin.sh","pattern":"[url:value = 'http://113.228.117.193:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ceb837-5a2d-18e6-0f50-000085927d28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/bin.sh","pattern":"[url:value = 'http://42.53.22.56:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1802fa-f304-557c-0192-00006d7f4900","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.236.62:50658/i","pattern":"[url:value = 'http://123.12.236.62:50658/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ddee67-f4c9-59ee-1c31-00008171e8b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/i","pattern":"[url:value = 'http://182.116.119.29:53082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28d1e2b-f70f-afa3-4446-000087262c3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/bin.sh","pattern":"[url:value = 'http://167.250.158.32:40802/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f902b-5400-19f7-7d8c-00001afe5baf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/i","pattern":"[url:value = 'http://42.55.212.26:51890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56816565-2ded-8083-4cb1-0000385f6067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/bin.sh","pattern":"[url:value = 'http://125.26.202.172:59746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6318f4dd-4ae6-e427-8d71-0000129b5f41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/bin.sh","pattern":"[url:value = 'http://182.112.39.204:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb41100-4a83-264b-0ab0-00006ba311b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/i","pattern":"[url:value = 'http://119.179.214.25:37703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f67cc1e-07e1-ed00-7919-00005657a7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/i","pattern":"[url:value = 'http://123.10.238.107:36973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d556948-810c-0253-ece2-000025c1ec3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.62.66:34836/i","pattern":"[url:value = 'http://219.157.62.66:34836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbcd13-08a9-8884-23b5-00008543fa42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/bin.sh","pattern":"[url:value = 'http://125.44.219.185:54557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc63296-2f85-10b0-6a89-0000929fb2d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/i","pattern":"[url:value = 'http://123.170.100.105:42942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0485c44-e6cd-9cfd-c565-0000edecbbe8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.81.19:46242/i","pattern":"[url:value = 'http://27.206.81.19:46242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e677e667-7f16-861e-817a-00007fab2818","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/i","pattern":"[url:value = 'http://110.37.58.92:44731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bcd61d6-6cd9-524f-a462-0000e441e8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/i","pattern":"[url:value = 'http://123.12.225.205:41540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7a7c4-7a6a-b171-2c0e-00008696068b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/bin.sh","pattern":"[url:value = 'http://210.208.104.156:36904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bade5c0-5f5f-b6a7-0f48-0000eeb70b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/i","pattern":"[url:value = 'http://123.5.186.20:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0feff27-3b10-937b-8366-000000553762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.140.248/init.sh","pattern":"[url:value = 'http://181.214.140.248/init.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2414b03-2fe5-cf0f-6544-0000e4661ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/bin.sh","pattern":"[url:value = 'http://109.236.44.113:59714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67266c3c-6928-09d0-9f30-0000c242f86b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/i","pattern":"[url:value = 'http://115.197.132.72:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27dc67f-1ca0-211c-3110-000018cf1758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:53074/i","pattern":"[url:value = 'http://196.189.35.172:53074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab0afea-645f-32b4-b9fa-0000b2fd0398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/bin.sh","pattern":"[url:value = 'http://182.116.119.29:53082/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19fcdc67-295e-dede-1e67-00002068ac36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/bin.sh","pattern":"[url:value = 'http://42.179.152.19:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db877bde-bfde-7db7-3978-0000cc76ebf1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/i","pattern":"[url:value = 'http://125.44.219.185:54557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d63ffde-d371-c12a-49f5-000034fe9009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/bin.sh","pattern":"[url:value = 'http://115.61.120.117:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86079bd7-c2e0-cdb9-9bf4-00007061a0ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/bin.sh","pattern":"[url:value = 'http://115.58.171.191:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0542f0a0-f6ee-f62a-a282-0000a160d9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/bin.sh","pattern":"[url:value = 'http://117.26.227.227:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a296e389-6582-d6e1-4287-000076adf35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.33.96:58607/i","pattern":"[url:value = 'http://182.119.33.96:58607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc3840a-aaf3-eff4-fd97-0000a4630e71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.201.94:60468/bin.sh","pattern":"[url:value = 'http://175.148.201.94:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d988d79-142d-b16d-5135-0000dfafeb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.29.63:58773/i","pattern":"[url:value = 'http://42.230.29.63:58773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e14d8e8-dc6e-2144-8f72-000000bc5f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.165:52379/i","pattern":"[url:value = 'http://123.5.124.165:52379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321c5a4c-0d88-fbfb-0749-0000d9a3d8a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:42743/i","pattern":"[url:value = 'http://210.208.110.42:42743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fdf1dc-2966-fa78-fbcb-0000be4ed72f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/i","pattern":"[url:value = 'http://42.237.60.215:54523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc0283c-43e0-cf93-2f64-00001f3e35fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.182.143:33305/i","pattern":"[url:value = 'http://115.54.182.143:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9953d88f-0631-26ee-ad07-0000a59c56d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/i","pattern":"[url:value = 'http://125.110.46.203:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d5a451-2e84-21e5-0d56-0000a5da5e77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/bin.sh","pattern":"[url:value = 'http://221.15.4.237:59213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e9ed31-6cc2-898b-4b0f-0000e3d91de1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/i","pattern":"[url:value = 'http://210.208.104.156:36904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd37fe54-e971-68f2-3ff0-0000ad41aa23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/bin.sh","pattern":"[url:value = 'http://123.5.186.20:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5528690b-b10d-2c75-47d4-000079a9d20e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/i","pattern":"[url:value = 'http://182.122.195.212:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ff516-125d-4eab-0200-000015a9928d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.32.46:45304/i","pattern":"[url:value = 'http://42.230.32.46:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a98a6a4-2802-ce25-3355-00002c8eb071","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/i","pattern":"[url:value = 'http://123.11.10.99:56358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458fc1c9-b14c-38c1-f622-0000c5ee909a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.171.67.100:36364/i","pattern":"[url:value = 'http://109.171.67.100:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee4a018-81f2-b33f-9bc8-0000ef232d70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/bin.sh","pattern":"[url:value = 'http://105.184.49.165:53813/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bfe99b-a081-9fc2-b213-0000d152f466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/bin.sh","pattern":"[url:value = 'http://123.173.86.99:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71d9994-0e1e-c89d-99a4-0000cde908ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://171.83.59.154:46798/Mozi.m","pattern":"[url:value = 'http://171.83.59.154:46798/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394c1527-c368-da91-e2ee-000081abfe5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.183.101:34303/i","pattern":"[url:value = 'http://182.115.183.101:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d836aeb3-729a-d954-6e78-0000cc5001c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/i","pattern":"[url:value = 'http://117.26.227.227:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37096f1-2001-ccdb-bf76-0000376e004a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.14.94:37078/i","pattern":"[url:value = 'http://42.224.14.94:37078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--062eae7b-710c-21ab-4642-000040805eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.128.149:36887/i","pattern":"[url:value = 'http://124.234.128.149:36887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b2c69-0057-3ea4-8209-0000f02b84b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/bin.sh","pattern":"[url:value = 'http://42.55.138.2:60455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8e452f-68d0-fa35-9c20-0000406951a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.97.33:40194/bin.sh","pattern":"[url:value = 'http://112.239.97.33:40194/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64cc3a8-d3d9-7155-7a82-0000bca0c0e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.135.245:34017/i","pattern":"[url:value = 'http://120.28.135.245:34017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e030cf-9163-32f8-4499-000011c94009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/i","pattern":"[url:value = 'http://123.5.83.209:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e36f456-23c0-b96f-d4e0-0000232da6a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1","pattern":"[url:value = 'https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1085830-245a-bd68-4763-0000aca4ffe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.171.177.193:32861/i","pattern":"[url:value = 'http://45.171.177.193:32861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94fb391b-2cae-0fe8-651f-0000c0eeaf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/bin.sh","pattern":"[url:value = 'http://223.105.50.190:53132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba824e4b-2622-deea-aff5-0000e5f5a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/bin.sh","pattern":"[url:value = 'http://222.142.210.206:51525/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--935a2c9f-3b17-be82-1ff0-0000b0b669b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b548ba06-4c4e-7793-8598-000096d6b639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.link/ksmd","pattern":"[url:value = 'https://kworker.eth.link/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc96cf5-afa8-ac68-db5d-00006c89aa57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.179.119.120/install.sh","pattern":"[url:value = 'http://167.179.119.120/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831bfbc8-f7ed-b631-ff7b-000016e7734f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd","pattern":"[url:value = 'https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b325dec-0263-86d4-9b1a-0000934c1e78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.98.10.60:55555/ksmd","pattern":"[url:value = 'http://216.98.10.60:55555/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f31e28d-0388-7ff2-d147-0000200d5c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.limo/ksmd","pattern":"[url:value = 'https://kworker.eth.limo/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ce0ead-62ea-ec2a-cca4-0000c7894910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd","pattern":"[url:value = 'http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0c8e26-9ae8-8e31-b8e7-0000640086ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/i","pattern":"[url:value = 'http://223.105.50.190:53132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231549e8-31f6-cdf3-06e3-00001fe1d432","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/bin.sh","pattern":"[url:value = 'http://182.126.247.153:53090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f169c919-d44b-c3da-c389-0000c9d7685b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/i","pattern":"[url:value = 'http://222.142.210.206:51525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6422b708-a2b6-5bfc-0fba-000084816de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/i","pattern":"[url:value = 'http://115.55.197.125:40668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5856f40-69e6-0acc-c770-0000fb5bc85c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/i","pattern":"[url:value = 'http://182.126.247.153:53090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b10113-e173-ea00-646c-00004f6beaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/bin.sh","pattern":"[url:value = 'http://123.12.225.188:60928/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--110e4f68-06a8-819e-4c22-000022eba1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/bin.sh","pattern":"[url:value = 'http://105.184.45.242:43025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c5a577-d2a6-3a96-9e38-00009db645a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/i","pattern":"[url:value = 'http://105.184.45.242:43025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2fc819d-f1cd-4771-1046-0000972e79c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/i","pattern":"[url:value = 'http://123.12.225.188:60928/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a47d2b2-0ac6-8efd-f488-0000691a1c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f1ef94-a2ac-997b-5801-00001d30784a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a730777-1715-bf47-d8cc-000023858d10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/gpon","pattern":"[url:value = 'http://94.154.43.104/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf38292-5181-8f48-56a8-000027e070f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4beb7ff-82d1-c19b-afca-0000cdb3d743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b98769-c3cb-70fb-768f-0000750fb026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dad95e6-5124-a7ac-f109-0000fd4848bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.104/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d850ba92-e746-4058-35e7-00007fa03e2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cb8f81-8879-678a-0ff5-0000a42cab85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.104/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab0d6d3-a463-d310-3fad-000067ba1fc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d48c92-f13f-e0b4-74d7-00001c69e8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.104/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735ce3f3-92c0-4c2e-4053-0000547a35a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416a8171-46c9-a5c8-133b-00002eba66c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c6ad43-7ac1-1fbd-1624-0000ef04d336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95146b8a-0875-7e35-d57e-00008407bd7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c1175f-9a7b-49bc-cab0-00007a765a34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.104/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20572975-250c-6464-8d10-00001705b489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mips","pattern":"[url:value = 'http://94.154.43.104/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6568de07-dba1-bd5e-4f79-0000adeb52b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d0f300-836a-d877-0c75-00004d342586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0258c5-d31d-3595-033f-0000ff7ea7d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c3a7bd-f73c-9453-3f49-0000dadb913f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i686","pattern":"[url:value = 'http://94.154.43.104/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36337b13-a684-290e-7eb3-0000990d999a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client","pattern":"[url:value = 'http://94.154.43.104/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48519e4-5132-76d1-3eb4-00005c4fe391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i586","pattern":"[url:value = 'http://94.154.43.104/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cea9995-8856-d4af-5d4d-0000eff205ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d6f7e5-04db-c03c-a32e-00006f12578b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7b1da3-4ea1-3965-7981-000017f36253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.104/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4302595c-3cd7-6d2e-e254-000014a71508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b0690b-7b0c-d5a6-2ecc-0000877dc9ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f39746-1a43-9822-1f1d-00009ad50b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5871b030-7ad3-be0c-b94a-000013da4f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f652238b-5d9a-c212-d419-000022daf680","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9409f0c4-6619-8efe-5008-00000fb022bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d75efc2-449b-227e-6e09-00009fd46d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c56941-9d7d-176e-f21b-0000da1f4470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad58ce-c7c6-bd3e-e6d0-0000b542f645","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cc38fb-854d-e01c-9db7-0000c8aaeb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a8b81c-9b09-4492-0386-0000155b1066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2952994e-ca38-4c81-5434-0000ab94e4c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14279c19-668e-db12-0af6-00009f7fad38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d317d826-f9e0-d203-0d7b-00000284b5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ce967-0721-87a7-ae43-00003fe49c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121baa4-5c95-6b93-cbba-00007844e69f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9f2607-20bc-2a53-5ac9-000052575e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83a8be5-9041-0d92-23a5-00004524cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a34877-cbb0-79b2-8cf4-0000d2b70c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999b8515-21e3-d640-8cfc-0000cfb2026e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab46aef-586c-279f-ebd9-000005d626f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client","pattern":"[url:value = 'http://silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--501a1008-ea75-ee6e-b16a-00004dc5ff6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9328effd-621c-c9aa-fc02-0000a539e267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fd9f72-c1be-6529-4682-000096d6e150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c7de0c-7eeb-eb5f-f89e-0000e7d70328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd80a9df-731d-f5aa-adae-0000e0deb3de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15953c5b-56c3-8aad-8e86-000067099ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b312d1-4afc-04f9-5747-000052a1888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5babfdac-8e94-e41c-ad21-0000c4020461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb086d-522f-3f96-5f5d-000070168cfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7761d418-9b16-e08c-1632-000039a2e6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a38806-2d47-f105-b6b4-00004c7ed91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa39dd2-bb9b-ebfc-dce1-0000f14ba2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1575c9-0ad5-4240-0256-0000559d8176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac9d09-2ac5-84c0-ddf6-0000e0286504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b142717-584c-42b2-369a-00002d009668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e1b56-74a7-fae6-7a9a-0000b9a2a026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b712f954-1084-15fc-a401-0000a904e8c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c410d6a0-dcb8-8db8-0758-0000e7db6af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd6b576-0cd5-5b0f-f784-000052087c9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5487d4-20af-0714-78c1-00006632431c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2daa434a-81fe-3670-69cd-0000642c1ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a88a202-03e3-45ed-157b-000088a044d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c11409-e465-e970-4278-0000396a5b52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf00c0c-19de-720e-e14c-0000ec640181","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454b155-120f-3b9d-3c7b-00000fd9a335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1479d417-49fe-f284-e145-0000219239cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6186779c-90fe-4416-ef05-000064dacd7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb865-0d8f-bdbf-0f1d-0000d1c4a7ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb03eb39-a0d7-2d54-3734-0000fb4fe0c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6704cab-0e33-3a2e-1a02-00002d9286dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264fb695-9399-aced-411d-00005b526aac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d6a0a2-c445-db87-5a23-0000ef3d0729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a2e76e-d703-fe4a-8905-00009fd80482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8aad0cc-69e4-d099-040a-0000dbf8a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a53f41-53e7-571a-1964-00007b4cdf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f95db6-a462-00e1-29f1-0000fed1ae6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf00539-096d-b1c8-7b82-00001f069d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4962d3a-48ef-46ea-27ae-0000e4cc49c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d62e556-94d5-72e7-0b5c-00001cf2107c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9455560-c0a7-047c-f5aa-00007ddb9269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd1dba8-42ba-120b-ef11-0000b005b7df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fdef7e-bcc7-0658-b19c-0000b0f36105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c861ac-2dc7-c23d-bc5e-0000cd4df1ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe6d20-7d98-183a-5b7f-0000466dc90a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a4fa06-606d-1f2c-fe19-0000cf1357f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9bb2ab-c4ee-5668-c525-0000907571c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d72946-db7d-9e70-1b9c-0000dc906cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651fa3e6-8831-5e3f-5a70-0000513b0b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda603e9-b93f-ada9-6252-000046ddfb22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ca3b1c-e4f7-4a6a-b1d4-0000a649db18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4c44bd-f275-8ad5-952d-0000d28faf8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f59120d-6a7c-61eb-f825-000096ed4fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4f62f7-e5c0-5fa3-f20b-0000f55575f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65accc9b-829f-04d6-939b-0000bd1f655b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e01642-d1dd-21f4-61ae-00003bfa4b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2c8509-11d6-4603-c577-00008f8b7ef3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4a8d24-be20-4ce7-c6e0-0000d316e581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.172.218.181:39713/bin.sh","pattern":"[url:value = 'http://45.172.218.181:39713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119e49c7-d62d-4166-f0fd-0000569a8f75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d3d1b1-c31a-e374-74b8-0000b713a61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9300db62-a34c-fbf3-087b-0000dde946a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603ad34d-ebff-fe82-b076-0000e02d1433","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b26f3d9-7337-d3fe-377a-00009bb27c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df3243-9fa0-e5cf-3dab-00007db6ed60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b244d1-8827-a28f-99bb-0000c9474269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5cc92a-94ab-0ece-89ac-0000b949f70d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4161b5ce-d226-e88e-b63e-0000cc40f596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ce0158-98c8-2f8b-df99-0000f31ee467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43270b97-67f5-156c-40ce-00004ad48738","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ecc116-c874-eb74-c003-00009780d2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f2956f-8921-455b-f101-0000e87824b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f63a9-80be-1290-72a0-0000da693623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46203eaa-cc7d-274d-e3ab-00005a32a6eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1254f1a-3d7c-df3a-4f75-0000d922e444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404da31-f357-11ea-3111-0000ad6523d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8fa79-a672-0f72-0be0-00009908347a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3dc71b-1922-96b9-5434-000038d60428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e790075-0a8c-9688-fa0d-00008f952693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7713577f-c31b-6cb8-1db6-0000da9fe0f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46c7d55-adf5-efa9-5e7e-0000409483e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3f58a2-0ee1-c242-fa0d-0000ea8e360f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384810c-ad5d-33a4-cf67-00003521526a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16266d3-b86e-5f23-70d8-0000eba20253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09599b0-9870-ed63-9363-000011ceede6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573394cf-31b3-7d32-f18b-0000c478ba8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d09419-d981-30cb-f47a-0000747f409c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1673941f-dd36-3b45-dc6a-00003f2dce6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac274b-74f4-1d6f-24e1-00008d1c7ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.32:52224/i","pattern":"[url:value = 'http://110.37.39.32:52224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36b4dc3-81cf-d191-19c8-0000f828e48c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c191b6-f13c-12f9-9288-0000b19c8eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a187d9b7-3637-2679-32d5-00001741c54f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69614fd6-ae31-baac-3adf-000030260e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fc9bb0-542c-9183-e244-00001796561f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ad6547-5e09-5120-71bc-0000314e9e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332fb43c-a0f2-1268-758b-0000f27f0f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58dc9cbe-9036-aa4b-6432-00006927cd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b18661-a1ea-ea24-c3b2-00006cdc58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458121cf-58e4-48aa-227c-000078a532c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e315df59-c85e-0d20-3893-0000fc666d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9fea74-280e-9c85-6508-000063af10ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8214e19c-c0b4-9354-07b2-00005dc01268","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e00396-2259-b55c-3512-000086cf30a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d76b1b-84d9-986d-bf9a-00007abbfc51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client","pattern":"[url:value = 'http://windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7e675e-0a8e-2313-1254-00000f55e705","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d9486a-e9fe-efe9-bd1f-00007699a452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5607440-5adb-3e6e-c8fa-0000820d1571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19813ad-6f95-274f-2955-0000baedd1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6133a637-d88a-a3df-51c0-000092dfcca3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d827c773-ab08-b967-2ba7-00008370679d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd0af66-9400-bb3d-018f-0000176080c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a152d6-0b9d-5a74-c9f7-0000542ea027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2030dd9-fac4-17f7-ae32-00005a896444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db7972f-49d0-e2d4-1b18-0000ac627efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd80e85-174f-0fa1-4e2c-00000503ebd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3291981-4f83-5737-8f4f-0000cd3305de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a34c61e-ffe5-52cd-4f74-00005eda4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e591d-4699-c960-831b-000071feae58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99fb189-e888-46e0-f64d-000087fc7454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00de78fc-f2f0-8304-1f42-0000ce25c337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932ff75f-5773-b785-ad6a-000063ba6693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4440a4a1-1d1f-360b-602b-0000907b4ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bd0384-637f-9eb2-c5f6-00008cb76ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16011778-61c1-d81a-5c38-0000dc10c850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87a263f-8bba-3f56-8e8b-0000a84ffced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f967885d-e5a4-d3ca-bb1b-0000b09e1e0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c0198e-1c30-654f-caab-00001fb9181c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7983e1bf-6fba-6589-ad8d-000009a0eccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57e3d52-d05d-85eb-88c4-0000461bab40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b8617c-209d-6c53-da63-000010c1b5cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2d23ae-1dc8-b4c0-f3d2-0000dce61e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c764c439-d03a-0c34-ed89-00003a852c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff057521-4cc5-3561-2ed0-0000efdb10ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c562bc-2904-a4fd-b8c8-000084f77d09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f22c635-2eba-4326-1759-00009e165366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcc3b01-0876-6d7d-053b-00005bd44e21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b37dfc-fb73-5d72-877f-000080512ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11995dd-c957-974f-4d6d-0000197a35f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f161177e-c485-da0c-428c-0000952fd55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0bf05a-74e6-98cb-bd99-00001633d617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91681578-d588-9d95-ba2a-0000da4873a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ceb29-61ab-215b-5414-000027d32f70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08bb9c8-4fa2-e74a-ece5-000024a7cdbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c5b00b-d46c-dd84-6a69-0000f7e8323c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7535dc1e-d6bf-aa74-6881-000099f08591","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7195ca-4dbe-e0e3-8a59-0000437a69f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a65b41-cc03-1b2a-10f3-0000e3d4203e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537cdcf0-e1ad-c715-9c84-0000358c8129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823f4d76-9b6b-02d0-0967-000057bb4dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19780ad2-9b3d-f0d7-8944-0000de4ab56d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b802a49c-b557-835a-980e-0000241a1c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d652cef-3b95-b4a5-c161-000052212c07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1536100-5746-c34a-6305-00007af21fe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8d6600-3bd5-85e4-4f49-000054d876fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbd6a00-f9a4-cd6f-b6b5-0000deb4098e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355453b6-3dfa-eafb-cb54-0000c8355c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1128c10-dab4-98b6-4a09-00008cdf4000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ae020-48f2-1c82-4e66-00009f289ae1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dff707f-2285-18fb-b4c8-0000a9e6fc85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104d41b1-90b8-c928-1468-0000d1e592f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3114dde-afea-54c5-ccaa-00005c064ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310e2dae-c30f-d4f2-efad-0000e002421d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a91b165-71c4-ec06-2453-0000c0bc7064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf59f822-5b0c-2a98-381b-0000016d550a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/bin.sh","pattern":"[url:value = 'http://110.38.210.180:55714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b64d1ed-e10f-20d9-eeea-000087b057c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179039c3-35b4-5a34-f49d-00009914735e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163496a1-f460-7528-4915-00002a63abc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce016727-72d9-2f98-f19a-000094cfd8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b10870-44a1-6d39-fb60-0000d438249a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605be62d-1b23-d037-9413-0000307e4c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a3aa6c-a833-3ee8-b86c-0000ae8cd102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af8149d-baf3-c097-61e4-00009c75c36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b1461e-f153-6a17-4eca-0000f88ba06a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459455aa-a3e2-fd3e-6727-000010376311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c34839-457d-8ec7-17c2-0000e501cd1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f80149-d13c-3bb8-55d7-00002140b8d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b3855f-1dd9-ae32-ba86-0000870aa28e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8b0882-bc49-d2f7-217d-0000a4745aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e6f69b-38c6-38d9-8411-00000ebf13fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c776ce8-f756-1f74-c3b6-000054ae04ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36aaa117-a701-17be-dc22-00006c003733","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecba558-54d8-ff87-391b-0000491f692c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35815191-7dab-973a-e809-000031b848ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ba77f-11e5-0948-57b1-00002d400a72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d996c74-b835-334a-4008-0000e7158a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9146653b-fb27-fe68-9c44-00005b7d3409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e7007-56d2-1725-4a5d-0000c9b194b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cfdc7da-76cc-7d65-6ecf-000033df3a4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca07738-6334-b0e0-635c-000068a6bd43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54bbc8b-dc64-94c7-04bd-0000b068c8d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67cc5690-de6d-246b-dafc-000077568970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440755b1-a5ec-3a62-8300-00006942ed7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62364be9-ba79-6342-1b0d-00008e72adb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db27d11-4b9e-87b2-fef3-0000566c59af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07623134-4423-d70c-162a-0000b2f50f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52be14e2-e9af-5efd-60b9-00005c6708ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2ae885-7003-8040-4d30-00005e942c9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22e5d79-abe3-35a1-5d3f-00007c953855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00997a42-02a9-bf44-6c28-0000db6ba69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2790dc4-ae65-2e26-556e-0000fea7cc25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ec4823-2e62-851e-df6a-00005f61d619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.152.6:41032/i","pattern":"[url:value = 'http://119.116.152.6:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35775fc-a196-eda9-556f-0000efef863d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e483b19a-9cd1-98eb-02d2-00008d9d350f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eb23c3-a7e6-97f5-c4a3-0000eeee2194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c515b9-43d9-fa0b-79c2-0000e2425079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/locopoco","pattern":"[url:value = 'http://178.16.54.109/locopoco']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fe1597-ffe0-0b91-d3da-0000619ad231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efceaeb1-094e-fd7b-10a1-00007cb2afb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7c32e1-bd2d-a872-037e-0000e8959604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f960c521-fbfc-8bdb-1938-000036c62bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7914b491-fdaf-8046-40b5-000092d428d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a52b5c-3f56-9d3e-fedf-0000411c3896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b2099e-27f5-03ab-e383-0000f756b9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f7273b-1c9e-470d-b6b4-000025549a42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba7fa87-9418-b98d-0fb9-0000b6ed771c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i686","pattern":"[url:value = 'http://94.154.43.117/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6b9fb2-b2f4-2a9b-60c3-00001e1541c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e77d9d-60c8-4d97-6067-0000a5421eff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a804cc6-ea06-e8fb-1629-0000d0202cef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51c61f7-f8d4-7111-33de-00002c1a26a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.117/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be313c9f-e0d6-006d-063e-00002014c318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.65.199:56561/i","pattern":"[url:value = 'http://219.157.65.199:56561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448b4c2b-4967-e40d-a981-0000e6c8b64a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33744f-bd98-2597-2ed5-00007b3352aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mips","pattern":"[url:value = 'http://94.154.43.117/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6ad138-82ae-5ff9-5b03-0000eb4a8d44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce524d6-996d-1d7f-0574-00005cfafb81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b726ca19-744b-37b0-6f6f-0000049967df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68027e64-2559-e913-550e-0000e41a136e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--511f4099-4eb7-e4c9-af9f-00007bc58470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.117/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aabf3ce-41f4-c69d-4403-000011d236e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d29395-5b96-baaf-c252-00003d1f55d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10a2499-674b-c4e7-8e08-00001789cec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f3c0c7-dfac-e93b-d719-00008fd8b123","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b841d5-815d-1bc2-e34c-000053ecf79f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.117/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319857b7-d41b-4237-67ab-00003f497def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2735bb54-9e4c-1433-27cf-0000ce4170b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dde5bb2-86a1-97e4-fef8-00000a8814a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.117/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4473f355-faef-c7cc-3fdd-0000689c3b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d9ae7c-1af2-cf6f-b75b-000066162fbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b328be-f9f1-e3a0-9c49-00003483dad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb595f4e-f5ad-d7d7-3c06-0000a1e64d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b99452c-f023-a06f-da24-0000c1fc6af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f2da7-04d0-77a7-1282-0000a3ba69be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0b05b9-47c3-6422-0dec-0000d45cade2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e144de-1e90-45ce-0b2a-0000307905b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i586","pattern":"[url:value = 'http://94.154.43.117/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ac0e8f-8b57-0cef-393f-00005ffcdbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af803a59-581d-a6eb-15ec-00005f0a0d67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6960a25b-a5af-c6e3-532d-0000451c3ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a891060d-e13f-9b75-8637-00002dfcd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cd6b46-94a1-2c9a-9815-0000e3bdb85e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c87715-446f-1475-6b9e-00001b5a8151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf7f17c-bc6e-d8ee-8781-000087e36312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.117/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced34654-f107-6796-8e3a-0000263aa8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b571fa-774f-e73b-fc2a-0000c10abc2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121ff32-cd7d-dfbd-8e56-00000cd4999d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0223041-639a-170f-6fb4-00008f08d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260b2f52-c087-be91-8ffc-00001e805eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177c2735-765c-ee6d-3aef-000055a0edb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc30a6a-bda0-5fc6-14a6-000049b470d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267b733-b9ca-7a0f-f6e5-0000aa09d261","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c32400c-0959-8286-a8c3-0000c5c2a253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b520ac8-77e1-cef3-661b-000014405a7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3faa800-1216-8f8d-1fbc-0000cfc0688e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ca5bd0-632f-0c0e-ee2c-00005b01df3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f6f6ab-ed8f-0c6e-1e07-00003763e62b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client","pattern":"[url:value = 'http://94.154.43.117/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a341ce6-21ee-9b39-2192-00009eda400e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841d78c6-b1db-b144-f678-0000e5b430ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/gpon","pattern":"[url:value = 'http://94.154.43.117/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6805912-9f7e-40b4-3ca3-00006d15575b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549486b3-02fd-cda8-c07d-0000a9d56d23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--decb494b-9dd4-3a77-8ca8-0000a5b4c825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89604d80-2954-e041-7c9f-00001d260eb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d442a26-c513-2fe8-71f8-0000d66c36c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71194f25-7365-0dd3-16b7-0000d97a3ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469f6721-df65-9df7-135f-000087f51a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3497cac2-c35a-6634-97f9-000039233e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/bin.sh","pattern":"[url:value = 'http://89.165.130.43:46337/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c67617-8ce1-308e-12c7-0000e67d49db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9fad7b-5aaf-907d-1ee9-0000d7cb8e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/i","pattern":"[url:value = 'http://110.38.210.180:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d752ad2-973d-53b4-37dd-0000357fed76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/i","pattern":"[url:value = 'http://60.18.9.255:60894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afd4d34-1ccc-89ba-3f70-000051cfb781","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72cde8e9-fa06-3c1f-870f-00002137691a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50270621-7fcf-3df8-a5b2-00003ea97bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/gpon","pattern":"[url:value = 'http://94.154.43.125/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d456033-50b8-dbcb-05e4-0000b110c0b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587ca8c8-3e35-4a40-16c5-000054a789f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client","pattern":"[url:value = 'http://coralwebqe.help/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3199e370-269f-08d9-0adc-00005c07a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mipsel","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbf7356-a2e0-5657-1b81-0000c38b9338","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i686","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8c2a35-a93c-69e9-9b8e-00005db36109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/android.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae90360-25bb-12a3-349e-00004e5a87db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfff917-3c36-9dda-40b4-00000563453e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_x86_64","pattern":"[url:value = 'http://coralwebqe.help/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58f2256-ea12-fe8f-7496-000046f2cf98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84164aa6-29f0-f39b-c18f-0000d7c17626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/gpon","pattern":"[url:value = 'http://94.154.43.121/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f58bd-6779-a916-329d-0000adf1a32b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bd53f0-5992-40ea-0b46-000065f4f7bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6239640-411c-79a0-e66c-000001909426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a9a6e2-221d-5ffb-ece3-000009474173","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8410a486-c194-40ec-332f-0000c6124b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/gpon","pattern":"[url:value = 'http://94.154.43.133/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca9b336-6613-e3be-fab6-0000b4723ac7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c7f404-2051-ad59-3fd4-000086af9e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/micro.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eecbbd-e7f1-1b43-d485-0000564ce9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b81437a-fb6a-d3e0-061d-0000ecfb0713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bd4624-a0c9-b750-2c16-0000d8c18c09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e480b3-fa8f-e4c4-b64d-0000af8abbb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/gpon","pattern":"[url:value = 'http://94.154.43.110/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6750ad7d-631a-67e8-d72d-0000d89d2d9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d91715-3da7-8e13-8cb0-00001417ca34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/gpon","pattern":"[url:value = 'http://coralwebqe.help/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac7e1d0-69b8-730f-8c02-00003b9ae5fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/chunk.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2b9f0f-cd0c-a2a3-2fcd-0000a54f6d2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be911558-5716-b074-30f4-000026647fde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_powerpc","pattern":"[url:value = 'http://coralwebqe.help/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2607c948-2bf3-7065-f2c1-00000ea36054","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_m68k","pattern":"[url:value = 'http://coralwebqe.help/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8673ec-a52f-3024-5eab-000054476076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5ef7e7-2edd-42eb-1598-00008ff5887f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv7l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d56d10-f66b-e9c0-5907-0000cebad5bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf26bc68-bf9b-33d3-8a37-000028cfbbc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f25fa38-43fb-2ebb-bf1e-00007b592c99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff959c6-5243-3da0-06b0-0000ce4c0366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6445c6a6-d909-8415-c2de-0000b295a1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv6l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f689565-d9c1-75c1-e47c-0000f535db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv5l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4297cbf6-d37c-50fc-e513-0000035a42ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496dd70e-5aaa-5550-6916-0000039226d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef9cd0f-2a7b-ecec-b658-0000451fe196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i586","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c529a1-3841-ea84-c5ae-00008384db1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa526f6-f14e-263c-e846-0000205d9e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_sh4","pattern":"[url:value = 'http://coralwebqe.help/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c4ff81-24c8-5d05-3433-00001baccff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5673a424-dfca-5d64-0691-0000c855f2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv4l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc4ea55-4711-e6a2-d1ad-0000a699b441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9831169e-2237-1b9c-69ba-00004ebd6521","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb2b70-296c-3b35-102e-00008a44ba27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i686","pattern":"[url:value = 'http://94.154.43.133/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8668542-f12a-ff51-4ddb-0000654db49b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99595684-8665-db77-d29f-0000ec1ce5e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a867f6b-13b9-9cf4-9d9f-00001c8822d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ae0b9d-c727-e47b-9487-0000d3273991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.121/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b259fa-1071-4e80-8e71-000002338711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.121/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38767f3f-5318-3847-1f81-0000ca80560b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05989fc-e85f-0a91-c85f-0000b05e05f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.46/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21705398-889f-3a75-cc34-0000c6e5d36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8946d8f7-bbe3-a02a-cc25-000092a38bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba91abf1-0dec-3edb-8aaf-00008a8b9a03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.133/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2517ad-db8a-72a9-d119-00006b51db21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i686","pattern":"[url:value = 'http://94.154.43.125/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01df6c2-0d85-4edb-968d-000047bd2d92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a748e06f-02a1-3a9d-4146-00009184f35a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mips","pattern":"[url:value = 'http://94.154.43.129/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5d6c7a-245b-254d-635c-00007182a127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c508427c-cfbd-bc9b-ab74-0000650971ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf1bd96-c0c5-5a2c-57b0-0000963993e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e987a5e5-08c0-d833-aa15-0000fbf30923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dc6ea7-b255-af6c-15c2-00005c5ad6ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i686","pattern":"[url:value = 'http://94.154.43.129/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cb7ef2-6c4e-ac15-db66-0000ff3cad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i586","pattern":"[url:value = 'http://94.154.43.121/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81e7c1f-c1ef-72b3-228b-00009a89aad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08b0718-3609-5fa8-374e-0000d3687bd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43407ebf-a208-22e9-e41a-0000fd14e928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.100/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a1d353-74c5-c519-f667-00009148d052","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5265b3-a538-d57b-a41a-0000ae81aac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv7l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347f3670-00d7-4e02-fc9e-0000e921d012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv4l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9902ab05-13dd-bf13-1f43-0000514083d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef36b43-306f-da53-3287-000024176783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d0e404-4109-a835-857a-00004fbe09c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be4150d-b831-3431-cdf6-00006c7c16c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i586","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c9bb4a-57a1-7f73-c968-00006cf2401f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1d7e2b-65a7-2b4f-599e-000012d4d4f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mips","pattern":"[url:value = 'http://94.154.43.110/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c48370d-a7b3-37cc-1292-000014aebff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f389236-a1fb-c565-2eaa-0000bfe58cd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.129/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c768d877-1814-c79f-1df6-0000af409dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2552a87-39d0-35b1-205b-00006466211a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a2ab54-e6fe-92d8-33ff-0000eae8646d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i686","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d28a0b-f116-dab3-7ac5-0000519269af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6703fb9-48ac-96fc-11f8-00003622dbf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010d78ee-2675-faea-03b6-0000ce5d3746","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b30373e-d677-3283-28f9-00006c5d1df7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6b5d3-eaa2-fb8e-6e9e-0000ddbe9271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f38af1-3f50-3e21-3828-0000a5a88fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f135e785-7bee-a078-1831-000054043d3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce1d834-af6f-1332-d5d3-000049f895a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c46f99-1bed-4355-d139-000078d8b716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4187c606-acee-6133-26d5-00001e875f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3f88e2-7d69-2546-a2f9-00001b2c7e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f45500cf-ea72-45bc-3759-00007584315c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db108aa-ecf2-1881-3bcd-000054269437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e03916e-bba5-0468-642b-0000476c494b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.133/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eadedbd-6752-1163-c69e-00007a477a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f92ca9-0fce-80ec-7a45-0000df8f0237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/chunk.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2107724-587e-f533-9f52-0000b6fb5465","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.110/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb70ba75-076b-5dab-a624-0000e863d8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb5591-55e7-60db-771d-0000c3dd253f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d973f1-8912-04e4-d7c4-0000bb6d1cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebe4403-8274-798f-8f3f-00004efcef23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.129/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75e3c47-a152-1b48-7a61-00007e83db10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.133/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b76968-9480-b422-7625-0000538829be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd935e0e-bdc5-03b3-f72c-0000b3d6da3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280cd885-7216-afa7-2e46-000053df9fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f63a9f4-254f-a96f-dbb8-0000edc5a98f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i586","pattern":"[url:value = 'http://94.154.43.125/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a8e494-e05b-4256-261a-0000ec734874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb19965-6097-40f7-66ba-0000a68ffe97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mips","pattern":"[url:value = 'http://94.154.43.125/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe73fee-ed24-47e2-4080-000031bae508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1fce746-8f6d-b693-bb1f-000025556f31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.110/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae4b7e0-d0b4-a816-9c9c-000051778b1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775737a8-d081-4da8-7057-000046152d62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabb9772-563e-2598-a5ba-0000c1b08f83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cec521-d227-5a8a-627a-000007a8a567","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bff93a-1fdd-4b13-e0ec-0000432ad131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.46/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acb663b-927d-e955-e87c-0000e35998cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client","pattern":"[url:value = 'http://94.154.43.125/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd712dd-5b95-fa0a-a895-00001164d474","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1fcf74-649e-eb36-88d2-000066e443fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd819e4-51c4-3ea5-c68a-00004995ce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca720cad-3674-3ed3-d123-00003768d44b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client","pattern":"[url:value = 'http://94.154.43.121/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971348ce-1088-6979-4083-0000d3597aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cb7384-0e9b-dd21-8942-00001aeec747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/chunk.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65104c-e84b-a286-fc90-0000faecb6c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/gpon","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a2201-918e-2bdc-473f-0000d9b8d16c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/android.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4669096-3b2d-397d-49b0-0000d878cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064954f2-9392-fb27-2f1c-000093e18372","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv6l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76648a33-66fc-6292-c898-000059e8cb91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94979ca0-1901-7c22-adf2-00009e91dbab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6d4e12-9c2e-ccf7-4a9e-0000b62d4d81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba62c52-687c-8e33-8343-00009dcad2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.125/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2bfd9e-92a5-d6ad-17eb-00000e55b68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mips","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--973f6152-8fb3-eb94-d1ee-000051cec83c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de4367-0c02-d0e0-864c-000003d17b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ff86a1-eb00-a9e5-19da-00006c17a2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6550e20-2729-6a50-d2ed-000049b98b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9d8cc-977a-e89f-a29d-0000e1432f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f8ec2c-a2ad-8b7a-caf5-0000848c3c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90216fc0-dedf-e657-0bb0-0000cbd5b448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0194e63-dc35-8006-e2fd-0000b476fa2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mips","pattern":"[url:value = 'http://94.154.43.121/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4cb6650-39ea-7c48-5f0a-0000a7dbbcf3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/micro.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df4d2d23-5cb2-6c45-4484-0000e63ada0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668dc0ab-3aaf-42a5-500f-000079a8df9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i686","pattern":"[url:value = 'http://94.154.43.121/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1f0d57-3510-7e21-a417-0000a5230eac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d214c38-3ada-7832-0c45-0000ceabe19c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451f2a2b-27b3-f2eb-b3c2-0000220d2d37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4e82f-2fd4-3104-d064-0000807b5aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mips","pattern":"[url:value = 'http://94.154.43.46/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0314afd-47b5-1320-cc3d-000012220228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.110/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0cdece2-b88a-e950-6567-0000490e437d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34d1131-1308-2a9c-b808-00008a6bd4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9707c8d0-d076-d311-4329-0000e4b8b8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e76d8be-0bce-4425-7660-0000cb310df4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i586","pattern":"[url:value = 'http://94.154.43.46/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe4e889-d5a7-3300-b73a-00002b523acf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec7503a-cba3-6348-dd1e-000062312ff1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mips","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f58c27-258c-5127-20a3-00009395c4cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_powerpc","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f68c903-830c-f2c8-92ba-0000af617ef5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739ad0fe-d6be-2280-4abc-0000dacea442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i586","pattern":"[url:value = 'http://94.154.43.129/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79dadb3-1878-e804-51f1-0000a679284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.125/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e997c74-e6fb-c5e0-da19-0000add79806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client","pattern":"[url:value = 'http://94.154.43.46/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4d695d-5bdb-165a-2687-00002c401562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv4l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f7b196-a0c8-6888-dea1-0000d3ef793d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.133/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c44668-5073-7836-0223-000088983144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d2d562-7bce-e627-0e32-00002bb7d87a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c1bc59-b6b7-0049-b811-0000330843cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a99b7c6-f76c-f52a-2931-00004303bcc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5019fe54-3f0b-275d-a9fe-00007197a761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d507c94-0a6d-1c0c-5e45-0000e68d32b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d3caa5-870b-c668-58de-0000050a66e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.100/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7b0bdf-714c-1c35-268e-000056804602","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv6l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b973a1-c81c-be0e-dc5a-00009a63531c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_sh4","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d1485e-a416-dc40-1787-00005b2061fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da98bd78-2085-cc43-db1f-0000012bb71f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e34484-f2b1-915f-3a87-0000bf5ccff3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.121/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adcab5d-b312-acba-1d4c-0000528403aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.100/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d17e9f-d3cd-ada2-ca95-000042510c31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_sh4","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5e6612-34d5-6b18-337b-000054a0828c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58e1dbc-1c97-a4fd-b0e7-0000cd5e8034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.110/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84465de-9cb8-5676-0147-00001a5a4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627549b6-a854-4dcc-aa20-00003471b691","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2975f507-ae1f-b8c1-424a-0000b89dc349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fd9529-8492-5084-838d-00000cd0c889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i586","pattern":"[url:value = 'http://94.154.43.133/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9071dfc0-562d-824f-6556-0000447b4b04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client","pattern":"[url:value = 'http://94.154.43.129/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9ddbdd-39bb-10da-ca88-00009d5510ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4465d3b-059d-5f4d-2cbd-00004ce28897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ffd9c8-4fa4-ba36-54d8-00001632137f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24aa39eb-1b30-35c2-adca-00006946bd87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c12f1a3-272a-4505-815b-0000d156076f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622fa5b8-71a6-be25-fbf1-0000479a9f91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mips","pattern":"[url:value = 'http://94.154.43.133/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d640731-2dea-81ca-c11b-0000d441f9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv5l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5279645f-d37b-38ba-4dbe-0000bbde4b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7024fc1-fc74-437a-5914-0000fdf48b98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--905de9b6-2c65-93fb-8566-0000afc3a270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37215890-bcf4-6793-f018-0000376e3a6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client","pattern":"[url:value = 'http://94.154.43.133/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c42c4c-da32-17da-eb09-000028ce5cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea906eb-3c7e-fef7-e870-0000a891c63b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/gpon","pattern":"[url:value = 'http://94.154.43.46/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f556581c-5f94-281d-75f0-000011203cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv5l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d0f570-1679-c127-b913-00004f9feaf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca733ce-2b7c-e140-788a-0000d39ead03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb5c2f0-f8c2-fbd2-1b73-00000375c42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf4a9b5-3aba-ebac-2fe1-0000f2f6480a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2dcee2-f408-d5f5-ee47-00004eb6e72a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i586","pattern":"[url:value = 'http://94.154.43.100/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b133eb-29a4-3f19-fb03-000019cc9c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87adfeba-21fc-ea3f-1e9b-00001ee72d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1346e-15c3-e68d-f60f-0000e176a2f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169c5b69-ec99-a5a6-d641-00001386eee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164b5d41-1a77-8f41-6bef-00006b35194e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.125/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a44408b-5559-b635-62af-000098de7b39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91ad55a-dbc0-9c7f-83bb-000094702601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1560ab-34d2-4882-a16f-0000297b78e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i586","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cf4eba-5dc5-0f69-f5ce-0000599e83ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i586","pattern":"[url:value = 'http://94.154.43.110/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b5f65e-cde2-cafd-8ecc-00006bb94708","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c575f9-665f-e7df-4e15-0000f725b688","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853def2-1427-d56e-6311-0000afef0a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i686","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e906c783-4ca5-dbde-3754-00007add0422","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4948a67-036f-9954-2cf9-00008fe0bf43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b2e1b4-8c95-65b2-e927-0000542b03f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48df2972-1404-d665-dc4d-0000f129a976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c02dbb-e6f3-4eb3-cb8f-00008633cc83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.133/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8183dc1-b90d-545a-9e30-00001d9f69c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9707ddb-d29a-7a48-47d4-0000bf3ee901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a176e11b-a6f1-44db-674b-00001a061f3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cd64b1-f626-cea9-aa26-0000d4aec1a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ba73b2-967b-22b7-7051-00001d0a1f9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffc48d9-33ad-b431-de35-0000fa853064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b75bf43-7204-3292-fd2b-0000c5984168","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/gpon","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19a78ed-6055-438d-c0d2-0000a2708f58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.46/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b307ec77-194e-f291-2af3-0000c967128b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb64d4b9-82a1-a8f5-2c83-000091722580","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.129/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ddb644-cfe7-eb34-19ac-0000c918c7c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53813e4-d8c7-6788-2d29-00001370c46b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.100/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f705d5e9-5116-1b12-5af0-0000de606ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/gpon","pattern":"[url:value = 'http://94.154.43.129/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b2c6c8-ca7a-44d0-9c1f-0000d305206d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c87e9f-1be5-1ce9-e5b7-0000263aa45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de891e5-0ece-a3e8-77ad-00009dd48669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe424bf0-ee54-504a-08a2-0000caed80f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/gpon","pattern":"[url:value = 'http://94.154.43.100/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2659622a-cd49-53cf-2078-000084d066cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40323b1b-677d-29c9-39ce-00001060b7c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c688dcf9-63f5-a364-7267-0000808d8c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.46/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa24b9-2f32-6d3f-fefb-0000f9122b6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1e0fcd-88ea-5448-bdbc-00001096611d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c0376a-243a-76c4-5b16-0000ba556925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7603a9e-0951-563b-b310-00006be06fb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv7l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952261bd-d73b-8d74-b2f8-00009076337a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6b70bb-8a22-022e-3dd2-0000c8229584","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i686","pattern":"[url:value = 'http://94.154.43.100/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba72e09-26dc-63d8-d74b-0000b81241cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mipsel","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa1dbbb-6db4-bd3f-2cf9-0000fe60db8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188751c-7d8c-f162-41f8-00005061995a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50903d0-d7c4-2eab-6842-00002b0e9b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef855ee3-5055-43f9-eee8-0000e6382ccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.121/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f36259c-c7c0-1f8d-4c1c-0000273641db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mips","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2664d8-46fb-c2bf-02b7-0000a4700a16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.100/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944a21a7-daa2-deab-ef51-000032d7b3b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3066e7-23e1-89aa-5be7-00004da57f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i686","pattern":"[url:value = 'http://94.154.43.46/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc357ab5-0758-17c1-cb71-0000b4802cf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.121/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc123291-e808-280e-cf04-0000166eb2ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ffdcba-c4ae-0e73-6d78-00003c305b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab5f91e-00f1-0f42-67ff-00009cbbd699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146c3b8d-bd33-59fc-6a79-0000652d0f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6b0ef8-6871-3e37-e1a8-00000b42f247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c60277d-68b0-9eff-596d-00003f286dbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9aeb4b-aff8-1ea1-959a-000025e977c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a89f0e3-3edc-ea5c-729f-0000df0af144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i686","pattern":"[url:value = 'http://94.154.43.110/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a33bd06-8525-c0f1-758b-00001e4088b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b50b8a9-13ed-ee44-e89a-000065a8562e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f876a28-8d32-b85e-ba47-00002ee6c757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68a1185-d854-7d34-b984-00004d3cd51d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client","pattern":"[url:value = 'http://94.154.43.100/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31a114a-b19a-5a7e-fe00-000027c09701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_m68k","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22b9440-ef47-a34f-76ac-00003d7d7ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa24ffd5-9d10-7ee0-7fc8-0000d013ab7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbe04ad-5185-0c74-9308-00006d63d04e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986aeb1f-45af-d963-e736-0000f3e1031a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273af84-5357-c11f-e814-0000f2d976c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd22037-08d4-ed34-afef-0000280b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c9e423-e163-9183-bee0-000016d7f1ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b8b34-c44b-29d5-6db7-0000d503f110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a168b5ba-4d01-4e56-10f2-0000e6648d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.125/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eb64ec-5d94-6fe7-8848-000062c7f92b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_m68k","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab07e0f-2b76-7924-1fd8-000085f7e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604c13ab-2a02-3b65-bf0e-00003fdebb66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b85f0f3-a45e-9a37-5c11-0000ca9a1e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client","pattern":"[url:value = 'http://94.154.43.110/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--003ec575-ebd7-6355-2718-0000d1a0d1b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8d5d9b-6a73-3f3a-b030-0000992cce50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfc628a-6eff-267e-048e-0000fb146c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.46/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e0fdd2-4448-4d63-e0db-00007b63d98d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0495bac6-4246-fa51-4487-0000ff1b8ea1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee2f1f7-a88a-9456-7713-0000075e73bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0eafdd-30a6-87bc-64ae-0000bf006e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.125/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf9397d-f6ba-b95b-2815-000062ba7983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/micro.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41e69cb-de5b-c473-81f7-000027bcd166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfffe73-00ce-84e5-e1e0-000005fcb032","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mips","pattern":"[url:value = 'http://94.154.43.100/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f2e20d-9a20-8454-1e93-0000c355d434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_powerpc","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6ddb89-6f7f-314f-d02a-00004b5d647f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf2ab51-c029-656c-32b7-00008748f700","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140508c-7f49-a5ee-4bf9-0000d03ebbaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.129/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dabf2d0-6583-b576-1be4-00001e7189cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db30a501-9fcd-85a8-8c0d-0000001d5742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e8851-ca57-ee7b-bc38-0000e6816feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.129/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16165ced-f8f4-7c4a-dcf2-0000b796a142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9241f5cb-f006-ce18-7c25-0000019c5863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d250ad96-caa6-e2dd-58da-00007d2a126e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a4ecb9-7bac-e210-dd5c-00001d895bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/android.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9afd21-c170-0a47-0b9f-00007c318c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.110/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a1694d-4400-fb87-1495-000099da188a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d56315-e01a-e1a7-ec6a-000056f23ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e245013-84fe-5035-397d-00006caee18c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--939cf57d-e30f-9b31-e786-0000382d74a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.m68k","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc8db17-733d-9daa-b624-00001a6ca606","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm7","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a156224b-5aee-4164-c66b-0000ad0395cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.sh4","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b6f1d2-a8f9-a9a4-bbb7-000055de624c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.x86","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c6ba3b-f16c-2c11-4b7d-0000b0656e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm5","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a620762-e805-e88e-713a-000053d8cc39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mpsl","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ad30f-7e1b-25c3-b293-0000a85d6d7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dfee23-6f2a-7b9e-339d-000018ecac02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e6822e-e6ab-fe7e-248e-0000867993d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d169c73b-aec9-d7d8-c36a-00006c9dd77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb73fec-cb5b-ebe3-3d73-000059556027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53957124-ab45-aa7c-f742-00007d7384bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mipsel","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd18f0f-c0f5-912a-5c71-0000b2e56489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--493de951-a394-e9a5-b699-00004edc05d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcabab5-0e8c-91cf-cabd-000052781414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0c1ab-28fc-4481-4d9a-000038dba273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mips","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167570c1-7547-be81-4d36-00006b4b458a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://mail.springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe5b275-f509-0089-b3cd-0000a0df35b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a03c77-3411-0a86-da45-000000ede179","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da30c2c-2dcc-380c-642b-0000264b4719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66ef7ad-c829-0db2-5d4f-0000d421b01e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6427e45-7045-e312-b54e-0000ab497e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.spc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d404c01c-ccdd-4b7c-2c2c-00002ddd0c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.ppc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab75022-2238-ae6a-8d58-00002001ac41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d0d4aa-1870-3a13-4ee4-0000431e4f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.97/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0511dd87-94bf-a44f-d4eb-00004e2ad30e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78f34b7-0ac6-48be-e358-0000f24ac0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb65f925-f241-3ebf-8fee-000032560e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f67a617-19ed-e455-1054-0000c6941ff0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6e46de-ac5e-8d0c-a058-00007f48f954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed300733-dbde-1efb-1413-0000bbc3b8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1de399-e0b6-102e-5195-000010e10a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6388723-3273-ca2f-a217-000092bd0ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/ohshit.sh","pattern":"[url:value = 'http://94.154.43.97/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6bf99-b190-aa5c-3063-00000a5903ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485a165-a267-f473-31e4-000090a4b626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.97/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c488a4-1f74-8b55-fa9b-00004554a43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.spc","pattern":"[url:value = 'http://94.154.43.97/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08236fd-373b-7ab0-e98c-0000c3c0d694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.97/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e8b03f-83f3-44d5-55d9-0000915523f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a995b3-56c4-7fb4-c3be-0000905260fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425783bb-c9ca-6ffd-aaad-0000d8dc5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb7666e-ca11-2832-ecb6-0000d09d49b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11382b5-ecab-223a-bf45-0000bae8c293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6510a26a-db2b-0374-5bf8-000030b0c532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/ohshit.sh","pattern":"[url:value = 'http://utensil.cleverpondky.com/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38120db9-fa8e-6b70-ae49-000078ee8f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c31b4e-0947-4e8f-43e8-00002529bd44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a749cdf3-2f13-5588-3919-000032a0d8b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7b537a-0e39-7871-58e3-0000fb510eb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8796ce1b-98df-c682-8f77-0000a810c509","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccfeb81-ad6c-83b3-3b1a-0000a2d0c163","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm6","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b7ff6c-4e83-8126-9ad2-0000739aac74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/i","pattern":"[url:value = 'http://89.165.130.43:46337/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f8a3c9-50a9-7fc0-e47e-00005c447d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/bin.sh","pattern":"[url:value = 'http://119.177.244.151:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2615abbc-1ab3-d64f-602d-0000181cc335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/i","pattern":"[url:value = 'http://119.177.244.151:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2de20-b591-0d85-3397-00008033788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291fd51f-7ed1-b7f5-eee3-0000924b9d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9723c34-a91b-caef-30b7-00001aec61a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/id/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/id/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfa3188-3a7d-7b07-7c50-00008065137d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/i","pattern":"[url:value = 'http://42.55.138.2:60455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eba55d-e897-0a2f-4ec6-000074ba8ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/l","pattern":"[url:value = 'http://94.154.43.88/l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27cc319-3826-e3ff-dfea-00005ee56479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/arm7","pattern":"[url:value = 'http://94.154.43.88/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5301a540-737c-7490-f48f-0000209bb007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/i","pattern":"[url:value = 'http://31.173.12.38:48285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8965f1c1-d1e1-e4bf-39f1-00005464fc7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/a.sh","pattern":"[url:value = 'http://94.154.43.244/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b027bc5-108a-5381-51c8-000041d7d04f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/m68k","pattern":"[url:value = 'http://94.154.43.244/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be675c9b-02fd-0547-6f2d-0000c0e8f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc440","pattern":"[url:value = 'http://94.154.43.244/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3fc7f82-d470-0b17-0dbd-00000a6b518d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i586","pattern":"[url:value = 'http://94.154.43.244/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bdb0b4-1bda-515d-6b6f-00006734725c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/x86_64","pattern":"[url:value = 'http://94.154.43.244/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b17eec-bed4-e577-cdb8-00005954bb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm","pattern":"[url:value = 'http://94.154.43.244/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddbf82e-51c5-bf57-9f88-00000bc14e30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc","pattern":"[url:value = 'http://94.154.43.244/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23e15b5-ccfb-7bcb-6181-0000c1378228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i486","pattern":"[url:value = 'http://94.154.43.244/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35655af-0c9b-2638-ec27-0000639602e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm7","pattern":"[url:value = 'http://94.154.43.244/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bac1db-10e4-b102-0e71-00008cff2323","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i686","pattern":"[url:value = 'http://94.154.43.244/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4516539-c99a-69dd-a36c-0000db2a6585","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm6","pattern":"[url:value = 'http://94.154.43.244/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--236c394a-e514-d754-7a58-0000c3fbed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/c.sh","pattern":"[url:value = 'http://94.154.43.244/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8891a79-e14d-b08d-b951-00008b1fd7c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sh4","pattern":"[url:value = 'http://94.154.43.244/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172e4f13-aac3-b0de-f769-000041210695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mips","pattern":"[url:value = 'http://94.154.43.244/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fc89da-5056-8c2e-d096-00002a2268df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mpsl","pattern":"[url:value = 'http://94.154.43.244/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d583483-0fc2-74b7-ab17-0000c99fca6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm5","pattern":"[url:value = 'http://94.154.43.244/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92a3b41-635f-20d3-6b45-00006227845e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm6","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8862c2-135a-ecb9-fe21-0000d2f5056b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/x86_64","pattern":"[url:value = 'http://oregano.brightleafrv.com/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94229183-7aab-0699-e419-0000aa3f1a5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/m68k","pattern":"[url:value = 'http://load.dstat.top/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cdc95c4-7485-8297-eb13-0000e1839b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i586","pattern":"[url:value = 'http://load.dstat.top/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70236afb-558f-437f-40f8-000070922bb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm5","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f6c54f-f17d-ccb0-0989-00006de3fb03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/sh4","pattern":"[url:value = 'http://load.dstat.top/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f40416-c2aa-fd36-3c5e-00003261692b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c76bfe9-7169-4ce8-c091-0000887ec8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm7","pattern":"[url:value = 'http://load.dstat.top/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9a2b9d-d949-4b5e-824e-00006717e930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i686","pattern":"[url:value = 'http://load.dstat.top/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b718f7f-08c6-7756-1b85-000030c2af96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm6","pattern":"[url:value = 'http://load.dstat.top/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e278dec5-bdf9-1830-4725-000022770078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm5","pattern":"[url:value = 'http://load.dstat.top/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc19fa3-8ebd-9696-814c-000035f2c2f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i686","pattern":"[url:value = 'http://oregano.brightleafrv.com/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8721fa-36bb-cfdf-e869-0000b366b056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i586","pattern":"[url:value = 'http://oregano.brightleafrv.com/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff87d7a2-170f-9fbe-89a1-0000932f8904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mpsl","pattern":"[url:value = 'http://oregano.brightleafrv.com/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcc6083-2bda-e384-2cef-0000e02a05b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/sh4","pattern":"[url:value = 'http://oregano.brightleafrv.com/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ddc639c-93c6-bdb5-126b-0000c1caa2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mpsl","pattern":"[url:value = 'http://load.dstat.top/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80ea555-9459-125b-ad8a-0000aac9cc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mips","pattern":"[url:value = 'http://load.dstat.top/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41eafb9-024e-b14c-85dc-0000ed691da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/a.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589b705e-2167-7599-ff0f-0000dab67576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc440","pattern":"[url:value = 'http://load.dstat.top/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a42718-8649-9285-acf8-0000ed3d62f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc","pattern":"[url:value = 'http://load.dstat.top/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5528eed-7401-bb61-89d5-000075298395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc440","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1efff3-092e-0d2d-e912-00002adf483b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i486","pattern":"[url:value = 'http://load.dstat.top/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcea1da-962e-2c53-3d8e-0000bfa89798","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm","pattern":"[url:value = 'http://load.dstat.top/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2d0bd7-a707-cdbe-8c15-0000da9be33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm7","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067925bd-d060-db2c-6ea7-0000f8da3194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/m68k","pattern":"[url:value = 'http://oregano.brightleafrv.com/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a55116b-ba1d-09dd-3186-0000f82ce74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mips","pattern":"[url:value = 'http://oregano.brightleafrv.com/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f454bcd-f7b0-bff2-2cfa-0000783a63f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i486","pattern":"[url:value = 'http://oregano.brightleafrv.com/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51419c71-fe3f-9ca2-39f0-00007d6af388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/x86_64","pattern":"[url:value = 'http://load.dstat.top/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9e82d4-676f-6825-a796-000060f49c46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46451b87-c1b5-017a-f5ca-0000bf8c3668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/a.sh","pattern":"[url:value = 'http://load.dstat.top/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e176732-9062-d57c-cafd-00007af60c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/c.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1392af96-6a0b-7604-a7ea-00003a76d3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/bin.sh","pattern":"[url:value = 'http://42.224.169.34:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dde767f-53b8-93e5-55f8-0000b3d54b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.m68k","pattern":"[url:value = 'http://217.60.195.187/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73445db-0a74-1113-2935-0000d910d03d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arc","pattern":"[url:value = 'http://217.60.195.187/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928d6883-790d-56f9-f6ca-00002928fed7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm6","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa05047-64fa-fafa-5048-0000edce20cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.spc","pattern":"[url:value = 'http://217.60.195.187/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4cd30c-96cf-de1a-34e1-000028132741","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/c.sh","pattern":"[url:value = 'http://load.dstat.top/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b554dfd0-8b49-e41f-fc3c-000013593c16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb40c49-a653-6120-886d-0000eb84cb95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.sh4","pattern":"[url:value = 'http://217.60.195.187/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e6ee1e-57c1-d1c0-0641-00006b5a5263","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.ppc","pattern":"[url:value = 'http://217.60.195.187/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508c68dc-ee0f-d7ff-60e8-000039cfa70e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f242a9-e16b-c8a6-a60d-0000b3239dc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mips","pattern":"[url:value = 'http://217.60.195.187/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84208460-1eed-3fbb-e635-0000d820f38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mpsl","pattern":"[url:value = 'http://217.60.195.187/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14922831-2acb-267e-d756-0000928396df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba6230a-ea9e-7cc6-6849-000078fdb1bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7538f444-5d3f-5488-6756-0000db37fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b843939-017e-51d7-1bb4-00003b9d5139","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm5","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58a5815-fa61-7dad-88d5-0000919499b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm7","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56323696-9178-a79f-1559-00004c23414f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547488cf-6f14-59ec-aad4-0000cab733e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc6065b-b13b-5ed2-264c-0000b0c24470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c6b901-ebeb-4347-30df-0000b2b45d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa9c491d-a6ec-286f-89a9-0000388a5e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21266a98-eadc-42c1-8f55-00004a69aa17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ea328d-c846-8181-c9f2-0000b03492aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1e0e0d-865b-cdec-8d07-00009822c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639518a7-53e2-33fe-c740-00002a3ff1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35cb9a5-5b21-9ef6-4323-00007c1fd2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/bin.sh","pattern":"[url:value = 'http://162.255.251.91:50087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5072181-99fa-e0a0-30e2-0000067ab4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.66/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.66/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe0c950-ef4e-8988-f481-000022f8e59a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.67/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.67/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0eeb34-e832-4322-b303-00008d260f0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.104/svchost.exe","pattern":"[url:value = 'http://217.60.241.104/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb6ef8e-c216-7a57-13aa-0000e4398ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.253.48:55721/i","pattern":"[url:value = 'http://182.121.253.48:55721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae77c91-54c5-ccd9-8137-0000b543d6e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/i","pattern":"[url:value = 'http://162.255.251.91:50087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2310fb0-4700-1457-45f5-0000e76ea7f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://104.239.66.207/s.ps1","pattern":"[url:value = 'http://104.239.66.207/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a965669-a8e1-aecb-8b85-000046fd79d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://baltos.online/asset/update.dat","pattern":"[url:value = 'http://baltos.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08890af3-c2df-7340-62e9-00002d7f5b21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/i","pattern":"[url:value = 'http://182.119.58.252:48725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1067a4a8-d5f4-bcd9-6ab2-00003aa0c470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/i","pattern":"[url:value = 'http://42.224.169.34:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58fb56-1d89-b1fa-3409-00000ebff6e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/bin.sh","pattern":"[url:value = 'http://60.17.89.214:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135ad7f-133e-9921-a8d8-0000e6c16c45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/bin.sh","pattern":"[url:value = 'http://42.228.252.188:39953/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa41377d-3257-a049-7f30-000039836f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc","pattern":"[url:value = 'http://94.154.43.95/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52bd592-36f1-3da9-e61d-00005a12e1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mips","pattern":"[url:value = 'http://94.154.43.95/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85a9e94-eacd-b2fa-e658-00006a104a54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm4","pattern":"[url:value = 'http://94.154.43.95/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f13d52a-5190-1084-79d4-0000b95df693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.sh4","pattern":"[url:value = 'http://94.154.43.95/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f306b3-42bc-385f-b6da-000041800110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.x86","pattern":"[url:value = 'http://94.154.43.95/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5dae02-5b7b-ea3f-5223-0000d2ac2d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm5","pattern":"[url:value = 'http://94.154.43.95/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f9135b-6026-1834-6e24-000031118f85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mpsl","pattern":"[url:value = 'http://94.154.43.95/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4654ffb8-c683-d436-04a3-0000c01982df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm6","pattern":"[url:value = 'http://94.154.43.95/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a907e144-46f4-ec78-fda3-00005ae43715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.m68k","pattern":"[url:value = 'http://94.154.43.95/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3153cf2e-e6ec-f041-c818-000078a5e5ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm7","pattern":"[url:value = 'http://94.154.43.95/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303b8f34-bbb5-48c5-c84b-0000da046572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i486","pattern":"[url:value = 'http://94.154.43.95/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c257dce-9c93-f90c-1be1-0000bed22d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc440","pattern":"[url:value = 'http://94.154.43.95/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a213df-a6aa-5643-0bfc-00002b94b4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm5","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a52349-5951-b6fa-0964-00009328d3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ab4265-731d-6722-11a2-000039211b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm6","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bf5b5a-ec59-c14d-32eb-000097ccc479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i686","pattern":"[url:value = 'http://94.154.43.95/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd4684f-baaf-131a-33d6-0000a32a785a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mips","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce41f1b7-b6e7-7757-970f-0000381b0c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.sh4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f85c99-16f3-9dcc-8014-0000a3dcae80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.m68k","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f65a711-5ae5-77fd-9c49-0000350c332f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1313e0-fc6c-8d27-2e4f-0000b8c595f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de06ae86-6068-adfc-a6c3-0000c8291610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mpsl","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd40e687-2929-73bf-0b2a-00006ef45dec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i686","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d638752-1274-b905-cf24-00003b378113","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc440","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec432e9-8fb3-dba6-7958-0000233cfce7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i486","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a1222e-92e6-b3d3-1146-0000c0c6fb8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.x86","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfac72f3-28e4-5a01-1264-0000819d7c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm7","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8e03f3-62c7-9fe2-5210-000062d97589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6fba96-ba35-600d-08d0-0000cecfbbfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--490ad79d-a49c-62b7-8dc4-00002f11d482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16bc63d-f013-1495-ebca-00009f05fba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036ac723-89d8-266c-ded7-0000e7a174db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c84bf2-67c7-520a-57a0-0000c4043e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6a87d5-61c9-cefe-8ed3-0000a69134c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dd8b58-9844-1e9a-8952-0000b6ccd588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9464e6f9-9d81-579b-d72e-00000c98fc4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28f690f-f237-1c16-6423-000036124c7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650da99-4f8a-77ae-8c89-00001608ba26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48629787-7180-2268-28cb-00008db0544a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d036b9ed-fb98-d77f-59c2-0000aff186e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1a8d3b-52d9-db34-7406-0000af07503f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a130bba-a14f-be3e-85d6-00005bf5a647","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e363d66f-dead-c9d0-fea5-0000b4249b2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc05ba0-39ef-d6ea-6d86-0000ef255efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6db743-2cd9-b113-6249-00001e2d53a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f3d823-6997-117f-a8f3-0000a32851c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae129d69-e968-21d9-ab64-0000842630b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23ea9bf-61d9-a66a-197c-000084d0e66a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--788613a1-8fed-f6b1-76fa-000049f81506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66cf6ab-6969-7708-1547-000027b99cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a13a74-cf10-1130-a259-000023f6c832","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b02c7cf-5a5e-20a1-5804-00000430b40d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698787dc-8b06-5b35-2147-000077fb919c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/i","pattern":"[url:value = 'http://60.17.89.214:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ecc9ed-14e6-28d1-b235-0000e6c8c498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/bin.sh","pattern":"[url:value = 'http://123.11.12.92:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741b9a61-ecdf-f039-2c94-0000bca84fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/bin.sh","pattern":"[url:value = 'http://125.41.9.22:56917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1811b448-6cd2-c4ba-3c1f-0000514f19a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.236","pattern":"[ipv4-addr:value = '41.216.189.236']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6aa69a-8b4b-c4a0-ab19-000011f8ea0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.92","pattern":"[ipv4-addr:value = '41.216.189.92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca582c07-7c9d-497e-dea1-0000d87a8351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 91.92.42.213","pattern":"[ipv4-addr:value = '91.92.42.213']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d7d582a-d73a-bf0c-4ec4-00009d7a5c48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sysorbit.apk","pattern":"[url:value = 'http://94.154.43.244/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deefa78-c476-c5dd-3d4a-00000775ba83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.202.198:40071/i","pattern":"[url:value = 'http://115.49.202.198:40071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1503ccc-5ad0-1cab-ceaf-0000745b0230","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/i","pattern":"[url:value = 'http://123.11.12.92:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbaad3-bea2-1931-25a3-00003e509162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mipsel","pattern":"[url:value = 'http://94.154.43.244/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89bfa20-06d2-a965-e079-000045b5400d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d54145","pattern":"[url:value = 'http://5.182.210.174/d54145']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbc2810-f597-99e2-d624-000077dab7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef509d38-9218-d00c-5c7f-0000718a54ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arc","pattern":"[url:value = 'http://94.154.43.97/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fce526-0af1-ce2e-a5a0-00005fb4c6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab77eedb-3633-f1b7-4c97-00007b36a529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6b53f","pattern":"[url:value = 'http://5.182.210.174/d6b53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3d1b7b-fe5e-0605-4275-00005d8c454a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.i686","pattern":"[url:value = 'http://94.154.43.97/bins/David.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a6b753-a107-707a-c8ea-00000ebdeb96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d6369","pattern":"[url:value = 'http://5.182.210.174/1d6369']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586d2727-9789-8e96-6d72-000020b2ba13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bae1f5","pattern":"[url:value = 'http://5.182.210.174/bae1f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2801fd-e415-efec-60b5-000065c43ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c5700","pattern":"[url:value = 'http://5.182.210.174/2c5700']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25230d6b-325e-2fd4-bd42-0000a73d6e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c085b3","pattern":"[url:value = 'http://5.182.210.174/c085b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034d35a-4c3d-9934-9dbe-00001efc8cb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9a19b5","pattern":"[url:value = 'http://5.182.210.174/9a19b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec00727f-cd5a-3e9e-adbf-0000b6d2715b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b7ecfa","pattern":"[url:value = 'http://5.182.210.174/b7ecfa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba98bf1-630f-ebae-047c-0000370d061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5d99","pattern":"[url:value = 'http://5.182.210.174/5b5d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09d59c0-0bd9-ddf0-a8e3-0000801edaca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/734ef2","pattern":"[url:value = 'http://5.182.210.174/734ef2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e75d3c-1eaa-3905-00ee-0000e87c0d3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.97/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49190e27-4516-d30a-b0cd-0000339c90cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/607754","pattern":"[url:value = 'http://5.182.210.174/607754']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbfec5e-69b9-a629-0bdd-00003b4154d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6af350","pattern":"[url:value = 'http://5.182.210.174/6af350']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6c48fa-5a9d-57e1-5220-000030815b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mips","pattern":"[url:value = 'http://45.207.196.86/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03ad97-3770-a5af-7cba-00008e8a784e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsel","pattern":"[url:value = 'http://45.207.196.86/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedf8841-7261-f346-eed5-000060187f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv6l","pattern":"[url:value = 'http://45.207.196.86/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f0d419-4be7-5968-91f4-0000bf682f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.aarch64","pattern":"[url:value = 'http://45.207.196.86/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b66a80-60af-2502-1064-0000a853cb2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.arc","pattern":"[url:value = 'http://45.207.196.86/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca362312-1438-9af2-776f-00009ac7d082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sh4","pattern":"[url:value = 'http://45.207.196.86/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a665b7f0-79b5-fc1c-6259-0000d7ee9b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.x86_64","pattern":"[url:value = 'http://45.207.196.86/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81407c2c-b56e-5673-d362-000030778dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.m68k","pattern":"[url:value = 'http://45.207.196.86/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece9eac3-609b-4ce7-3b93-00001ad82ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv4l","pattern":"[url:value = 'http://45.207.196.86/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2261d5-de2f-c64e-b899-0000d6b2a9da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sparc","pattern":"[url:value = 'http://45.207.196.86/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c4b900-b396-b1ec-f9ab-00005d785631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv7l","pattern":"[url:value = 'http://45.207.196.86/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f2db82-dc9c-6492-7f91-000027b80551","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv5l","pattern":"[url:value = 'http://45.207.196.86/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187c125c-0528-df27-7790-0000b097dfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.i486","pattern":"[url:value = 'http://45.207.196.86/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e790e-ebf2-61d9-f116-0000dcc3a7a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sparc","pattern":"[url:value = 'http://94.154.43.244/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20953eb-7b93-4d33-bce3-0000b98bcc6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arc","pattern":"[url:value = 'http://94.154.43.244/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8045f8cd-25fb-614a-da03-0000b7d29e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.powerpc","pattern":"[url:value = 'http://45.207.196.86/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dbd901-8dde-834b-a80e-0000b44f5af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/i","pattern":"[url:value = 'http://112.248.82.251:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e5c409-54a6-68e9-5946-000084517acd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/telnet.sh","pattern":"[url:value = 'http://45.207.196.86/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f15af5-e47f-bae7-2762-0000cd978382","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.207.196.86/cat.sh","pattern":"[url:value = 'http://45.207.196.86/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71df967a-8b7b-2690-b0a1-00009c674a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsrouter","pattern":"[url:value = 'http://45.207.196.86/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1c3d8e-d5e3-fbdb-098d-000061346719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/i686","pattern":"[url:value = 'http://45.207.196.86/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540b2dfd-af48-cdb9-95ce-0000fe92261e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/spc","pattern":"[url:value = 'http://45.207.196.86/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fb2cc2-57b3-23c9-f3d3-000075034788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/dbg","pattern":"[url:value = 'http://45.207.196.86/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dcfd6c-5d73-266c-f3f5-00009bcc7686","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/i","pattern":"[url:value = 'http://125.41.9.22:56917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0337cd08-90ec-07f3-bbbf-00003c8c1819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin","pattern":"[url:value = 'http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c95c9e-5fb9-c59d-0ad6-0000f74db88e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.136.41:41095/bin.sh","pattern":"[url:value = 'http://59.96.136.41:41095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab9c112-24cb-006c-a126-00008b88df5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d0ab28","pattern":"[url:value = 'http://5.182.210.174/d0ab28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db312c7-905c-dd76-9866-00004a0a57b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cd35f","pattern":"[url:value = 'http://5.182.210.174/3cd35f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2538ecee-453c-abd9-57c4-00008dc3bc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/552ff2","pattern":"[url:value = 'http://5.182.210.174/552ff2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664fd96a-589e-a36e-d887-000007af2969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/xzOQ","pattern":"[url:value = 'http://129.121.114.124/xzOQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074691bb-73fd-e72f-7ea3-0000ca980ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e78460","pattern":"[url:value = 'http://5.182.210.174/e78460']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c1586a-17de-f733-a479-00002f372e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/475040","pattern":"[url:value = 'http://5.182.210.174/475040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5bf961-c57f-b383-3277-000084a4368c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5S4","pattern":"[url:value = 'http://129.121.114.124/5S4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea3305b-0b7e-e894-792d-0000040640b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Mxx","pattern":"[url:value = 'http://129.121.114.124/Mxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561b2aca-a66e-fd7e-1842-00008d4053aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/096459","pattern":"[url:value = 'http://5.182.210.174/096459']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d5040e-4217-d8a1-d719-00006c3d8bcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/TXA","pattern":"[url:value = 'http://129.121.114.124/TXA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2066d0-9c9a-8bf5-16a3-000071369cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Hxqh","pattern":"[url:value = 'http://129.121.114.124/Hxqh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43984f63-545a-cd47-5b50-000037d27828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be3b0c","pattern":"[url:value = 'http://5.182.210.174/be3b0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6651a4-1223-4084-d87f-00002d7618f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/013767","pattern":"[url:value = 'http://5.182.210.174/013767']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1ce658-0c7a-5f4c-6a3a-00008afc323e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8e9d9e","pattern":"[url:value = 'http://5.182.210.174/8e9d9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf5e905-4a64-cd40-1897-0000b0d6c90f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2de858","pattern":"[url:value = 'http://5.182.210.174/2de858']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83939563-c1ca-bdef-372f-0000dbd78cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/77fda1","pattern":"[url:value = 'http://5.182.210.174/77fda1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b582aa-fbbb-7025-19f1-000092272057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad49f7","pattern":"[url:value = 'http://5.182.210.174/ad49f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d665bcf9-21ef-20f8-d1aa-00003bcb7944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/actami.exe","pattern":"[url:value = 'http://95.164.53.193:5001/actami.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03061762-0ced-8134-32de-000053c57b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/uos.bin","pattern":"[url:value = 'http://95.164.53.193:5001/uos.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdfc086-4e06-1cc8-bd6c-0000cc583a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/heras.exe","pattern":"[url:value = 'http://95.164.53.193:5001/heras.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20480018-d94e-7b87-e725-00009e447ee4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/tris.exe","pattern":"[url:value = 'http://95.164.53.193:5001/tris.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca129c81-847a-7bcf-a675-00003acc808d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf407ed6-dad3-c28b-306d-0000ba12197b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c2fec7-c520-28a9-26f8-00009fc3aa20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b07e09-1ecb-0701-7a28-0000817a9953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b66439e-32bd-5548-3ed4-00007c7e0894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c03744-c17c-6ea8-dd5f-0000888602d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a0ad4f-a0bf-48ae-7c50-000042cfeef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85422d8-9495-60a5-7214-0000bc58f223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c0cd8-a66c-685b-0fdc-0000f43612b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8784b6c6-13c7-cc4d-ce15-0000391ee1dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26f1224-13fa-5e89-5c4c-00006ecba77a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19030031-6879-a875-a4d3-000048d69baa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz.sh","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62da21fa-67d4-9e13-5745-0000a6bc9de3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/debug","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5110380e-d9d9-40dd-9f89-0000f4c0c46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856822b2-b55a-c109-5e80-0000d677c01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02781a43-2c5d-268f-9720-0000685975e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bcb40a-7385-51ef-d9b4-0000bb9f54e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/bin.sh","pattern":"[url:value = 'http://182.116.36.226:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4569682-6c9d-9144-976e-0000b3d453a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe","pattern":"[url:value = 'https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8067fc-5ba8-9fe5-ea08-00008facb1f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mips","pattern":"[url:value = 'http://95.155.151.113/d/slim.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637e6cdd-0553-89ca-ebf7-00000fd29b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/i","pattern":"[url:value = 'http://182.116.36.226:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ea35a1-965a-bfb6-5045-0000ce22bb1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/gpon.sh","pattern":"[url:value = 'http://95.155.151.113/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01741cf-0ec5-65d3-78ce-000004346fb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/single.exe","pattern":"[url:value = 'http://95.164.53.193:5001/single.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b42231-ea3a-be27-92bc-0000ba61fb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/lol.exe","pattern":"[url:value = 'http://95.164.53.193:5001/lol.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f079e3-3818-219b-d379-00001c921bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/term.exe","pattern":"[url:value = 'http://95.164.53.193:5001/term.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2baf9418-23c2-2699-326b-0000b507462a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4d9fd5-9c70-9957-4c28-000081801916","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/babust.exe","pattern":"[url:value = 'http://95.164.53.193:5001/babust.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc0af7b-a4f1-67b8-cd41-00001e29a0a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ntmyebewekca.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ntmyebewekca.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cb21ac-bf47-0a9f-a66c-0000a43def94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/msis.exe","pattern":"[url:value = 'http://95.164.53.193:5001/msis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b01bb-e3f7-8f70-5f60-000088da9cbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/anfo.exe","pattern":"[url:value = 'http://95.164.53.193:5001/anfo.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5286d4-d5f7-5a44-6f8e-0000964ad70a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dt.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dt.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70488358-5d1b-b542-ac82-0000fe7038fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/suza.exe","pattern":"[url:value = 'http://95.164.53.193:5001/suza.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cf350b-edfb-7839-d856-000051c9b778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/jhgjse.exe","pattern":"[url:value = 'http://95.164.53.193:5001/jhgjse.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7c6a32-9523-d73d-2fc2-00001538ca66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/maya.exe","pattern":"[url:value = 'http://95.164.53.193:5001/maya.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21401676-0d8a-06c1-76ff-0000ce4ea52a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/mina.exe","pattern":"[url:value = 'http://95.164.53.193:5001/mina.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64475be-9d6c-b209-d4ce-0000184f9e48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ados.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ados.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4e14ce-bc9e-a1b4-512a-0000d08d45da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/adas.exe","pattern":"[url:value = 'http://95.164.53.193:5001/adas.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1852a135-c244-2c8b-3414-0000e4afdfbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/slim.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f87d40-4bcc-d13a-5e3b-0000ad1bb582","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm7","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--457827c0-e9bc-53e9-7ae4-0000e1c298c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/realtek.sh","pattern":"[url:value = 'http://95.155.151.113/realtek.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c089394-ebdd-1986-c5c3-00005adb04f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm64","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d6bf15-8f13-94e9-8d4d-0000e276e105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dit.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dit.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf216d0-6ba6-75cd-e3b7-000036d45683","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/bin.sh","pattern":"[url:value = 'http://125.42.13.21:45097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52262f23-fc4f-97b5-7c1c-00000e6c00d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/i","pattern":"[url:value = 'http://125.44.219.81:55457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3941a9d-ff3b-d46f-3d2e-000046f2c348","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/bin.sh","pattern":"[url:value = 'http://42.230.47.176:47866/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d356b42e-04fc-89df-70da-0000c404b1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/bin.sh","pattern":"[url:value = 'http://115.56.169.46:45542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cad5293-93f6-ac51-3724-00002bc9a388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/i","pattern":"[url:value = 'http://115.52.234.218:36909/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac355db3-1aa3-d94a-8213-00006ac8e271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ClashRoyalV2.apk","pattern":"[url:value = 'http://64.89.163.215/bins/ClashRoyalV2.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790121e6-17e3-f1de-3d2f-0000a281ccb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mips","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad793b5a-25d6-2e55-de3d-00008036c8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm7","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7e0bcc-469f-0883-1fab-0000388aafa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm6","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f401db77-4cf2-4b58-c7ee-0000b00317cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x86","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61beeba8-e4f3-4a5a-c8ed-0000b24efdbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43775a76-3769-e0d9-ed5d-00002a3f004e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm5","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591a9d5b-8d35-5c34-5189-0000ad12898b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mipsel","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848c97d5-ec39-aff1-045f-0000a53a6127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dafdd1e-d8f1-faba-5c05-00009031cef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/i","pattern":"[url:value = 'http://125.42.13.21:45097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a6a587-1d8a-cf5c-e031-0000fcc9067d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/i","pattern":"[url:value = 'http://115.56.169.46:45542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20331d94-e2f3-784a-1c40-00004ed058a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/bin.sh","pattern":"[url:value = 'http://123.4.234.31:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b839f6-80c3-014f-edd9-00008e01fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.194.16:48972/bin.sh","pattern":"[url:value = 'http://60.23.194.16:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2165dfeb-0442-e7b0-6d81-00006ab936c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/bin.sh","pattern":"[url:value = 'http://182.119.196.19:60380/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ecfb8cf-ef2f-c4b3-b381-000049426f4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/i","pattern":"[url:value = 'http://182.119.196.19:60380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--771da6c2-1257-859a-8b9c-0000fd067041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.234:60432/i","pattern":"[url:value = 'http://42.231.88.234:60432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f6032d-bc5e-8750-1776-0000bb1094c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/bin.sh","pattern":"[url:value = 'http://175.175.92.119:49061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cdf037-0fd7-32f6-7577-0000243be9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/bin.sh","pattern":"[url:value = 'http://123.5.157.40:59329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca51ecdc-a639-fc1e-549a-00009e4254b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip","pattern":"[url:value = 'https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46a468e-1965-ab0a-e599-000014991315","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/bin.sh","pattern":"[url:value = 'http://61.53.237.126:41063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91b676-218d-b6d5-81f1-0000919dfb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip","pattern":"[url:value = 'https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659acb1b-ad59-b6c5-98e5-0000dcd17d85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip","pattern":"[url:value = 'https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e0329c-de2a-1501-fd98-00004d05b273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc48f3-7a36-af0b-2011-0000b983b2b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ad551-6b76-fb18-99f0-0000eef98858","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f12a9e90-a9ec-ba13-6439-00003d1c93ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5b7cf9-6fdb-5782-c940-00003150b31c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip","pattern":"[url:value = 'https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4096a64d-4cee-a653-62eb-00006d057663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/73/gooddaycomingforu.hta","pattern":"[url:value = 'http://204.44.69.222/73/gooddaycomingforu.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5a60c2-1cd7-7b41-1825-0000881ed4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/i","pattern":"[url:value = 'http://123.5.157.40:59329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc5ba36-d5c1-aa85-8f26-000021b4ac9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/i","pattern":"[url:value = 'http://61.53.237.126:41063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562fd81d-1f03-64c3-54f5-000002b80795","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/i","pattern":"[url:value = 'http://175.175.92.119:49061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1b3ba8-49ca-e4c2-3db0-000095ca6fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/bin.sh","pattern":"[url:value = 'http://115.55.197.125:40668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48233fac-64c5-ea04-8b22-0000deadbaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/i","pattern":"[url:value = 'http://103.31.103.204:36161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a476915-463b-7c8a-426e-0000b21c20f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/bin.sh","pattern":"[url:value = 'http://120.28.139.121:34906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--982a1951-2042-2ec6-cf56-0000d9b3617f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.97.94.72:56444/bin.sh","pattern":"[url:value = 'http://123.97.94.72:56444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2008528-68e2-7cf8-ed8b-000084dc3e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/bin.sh","pattern":"[url:value = 'http://120.84.213.5:42072/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5bfa0a7-b48e-07e8-4fa7-0000dd981c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/bin.sh","pattern":"[url:value = 'http://219.155.223.157:48528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c8dc78-284e-7083-a521-000016a6bcde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/bin.sh","pattern":"[url:value = 'http://182.116.70.209:50318/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188523a-4e20-22c2-f5b4-0000b664116d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/i","pattern":"[url:value = 'http://120.28.139.121:34906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79861c5a-673d-ee94-cd3d-000077f195f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/i","pattern":"[url:value = 'http://219.155.223.157:48528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd3630-1504-44a8-dca0-0000ecd1fe5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/bin.sh","pattern":"[url:value = 'http://112.248.82.251:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3717554-b72e-214e-1521-0000ea890f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/i","pattern":"[url:value = 'http://120.84.213.5:42072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7c302-598c-ed96-642b-000042203311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/i","pattern":"[url:value = 'http://123.12.79.182:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0f48ce-d0a7-1f11-2c92-0000c7582694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.209.189:46958/i","pattern":"[url:value = 'http://115.49.209.189:46958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec58e27-d2dd-0b51-cd8a-0000877a96af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/bin.sh","pattern":"[url:value = 'http://42.235.89.134:36799/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ecc302-6000-3c12-fb07-0000be99bb8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.38.199:36695/i","pattern":"[url:value = 'http://105.224.38.199:36695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5bfc79-84d9-6b35-db68-0000ebe63062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/i","pattern":"[url:value = 'http://115.55.113.143:47041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4771ec2e-0a39-c1a5-08f0-0000136cd349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/i","pattern":"[url:value = 'http://42.235.89.134:36799/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45dc5961-4288-60c1-86c3-0000597f9c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/bin.sh","pattern":"[url:value = 'http://175.151.82.88:52513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0f2b3d-b1ae-37d8-65e7-00003e0ad33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/bin.sh","pattern":"[url:value = 'http://42.237.60.215:54523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2121b1-7952-3ca9-348f-0000f01cd428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/bin.sh","pattern":"[url:value = 'http://115.52.234.218:36909/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2079433-e764-cc9a-6819-00005912c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/bin.sh","pattern":"[url:value = 'http://115.59.22.163:43214/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d940a605-ab14-cd2c-4fe3-00007c3cdd63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.105:38525/i","pattern":"[url:value = 'http://163.142.95.105:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a19181-d679-926b-a290-0000dd0a1c3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/bin.sh","pattern":"[url:value = 'http://222.219.74.117:52755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9529f71-e842-0a1d-b720-0000d2f9e10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/i","pattern":"[url:value = 'http://115.59.22.163:43214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb9076c-809a-77c5-ead4-00004847eaf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/i","pattern":"[url:value = 'http://103.160.130.178:50403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca7d5ef-993e-9723-debb-0000e235d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/i","pattern":"[url:value = 'http://42.233.107.216:48024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3bc3d20-9f71-2988-5ffe-00006404b494","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/i","pattern":"[url:value = 'http://123.129.131.159:42876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84898cff-206d-f816-67ac-000049bc9d04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5223853602/uDSthxb.exe","pattern":"[url:value = 'http://62.60.226.140/files/5223853602/uDSthxb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b481a43-8777-4b1d-8580-00004e804575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/1781548144/Ql0IJZ0.exe","pattern":"[url:value = 'http://62.60.226.140/files/1781548144/Ql0IJZ0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6ee341-77db-b04e-fd25-00005a774e06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/bin.sh","pattern":"[url:value = 'http://117.253.29.68:48477/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72bcc0df-0a31-22c1-16b4-00007b8e1f38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/i","pattern":"[url:value = 'http://61.52.138.43:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54449a18-485c-d030-5de4-00001c5c502b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.193.250:53397/i","pattern":"[url:value = 'http://115.49.193.250:53397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c01272-6d02-83e6-7bfe-000040934b64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.8.86:51962/i","pattern":"[url:value = 'http://115.63.8.86:51962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27bb668-a523-0567-782a-0000c7fa7e7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.189.22.51:43030/bin.sh","pattern":"[url:value = 'http://123.189.22.51:43030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0c3844-1e90-b417-a68b-00009dcc90a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/i","pattern":"[url:value = 'http://117.253.29.68:48477/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807d02a7-7582-84bd-9993-000034c361c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/bin.sh","pattern":"[url:value = 'http://112.248.83.6:56719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f7c0ae-fb0f-df94-c09b-0000cfb385e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/bin.sh","pattern":"[url:value = 'http://42.227.204.129:58208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845b34f5-15c6-c61f-4a1d-000000ea8f9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/bbc","pattern":"[url:value = 'http://94.183.233.225/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23516972-75cc-eba5-aaf9-00000b50483f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/i","pattern":"[url:value = 'http://112.248.83.6:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--412b8636-cb03-fac1-7e7a-000015f51a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_aarch64","pattern":"[url:value = 'http://94.183.233.225/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e80745-cc50-d9d9-71df-000063b7f60b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/bin.sh","pattern":"[url:value = 'http://110.39.231.36:48526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c39f21-46af-0b4e-cb5a-0000394d6c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/bin.sh","pattern":"[url:value = 'http://61.136.49.183:57439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94da5229-419f-60da-66fa-00002d613c49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/i","pattern":"[url:value = 'http://27.217.3.109:54209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b7b231-4f6d-827c-cc55-0000522920e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/i","pattern":"[url:value = 'http://61.136.49.183:57439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab90e79e-2349-92e6-3732-0000e2cb2690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/i","pattern":"[url:value = 'http://110.39.231.36:48526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e350e8e0-5cd7-5473-09d9-0000a058bdfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/i","pattern":"[url:value = 'http://115.54.132.26:37475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b10d02a-f0c6-48dc-4ce1-00005d2353c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/bin.sh","pattern":"[url:value = 'http://113.228.209.236:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c264aee-c4d9-c1e0-c606-00008f919a0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://triflackcom.com/main2.exe","pattern":"[url:value = 'http://triflackcom.com/main2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f40292-d0e5-a063-da6c-000082077d8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/i","pattern":"[url:value = 'http://113.228.209.236:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feeaf12d-65c4-687c-58e6-0000899b4b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/i","pattern":"[url:value = 'http://77.236.74.65:45120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4e81b8-b5e7-2f9e-32a1-00008cc72f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/bin.sh","pattern":"[url:value = 'http://124.235.243.150:48322/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ac025c-eca7-6838-2259-00007c861f5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://212.164.115.235:53219/bin.sh","pattern":"[url:value = 'http://212.164.115.235:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0028fd38-5018-00d6-08dc-00004aa9c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_hk","pattern":"[url:value = 'http://95.155.151.113/sensi_hk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14491048-a6b4-7904-f7e9-0000cf3d72a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.sh","pattern":"[url:value = 'http://95.155.151.113/unifi.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce8cc01-2ac7-4a0f-76d8-00003c2add9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.aarch64","pattern":"[url:value = 'http://95.155.151.113/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce43bd3-8e2a-110c-709f-0000e06c0702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.arm64","pattern":"[url:value = 'http://95.155.151.113/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3a6989-10ab-182a-b2f4-000068a16c91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tp","pattern":"[url:value = 'http://95.155.151.113/sensi_tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60226aab-e697-2247-3542-00006b293586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/huawei.sh","pattern":"[url:value = 'http://95.155.151.113/huawei.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08ceeaf-0d12-272a-2ab9-000002a14e5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm5","pattern":"[url:value = 'http://95.155.151.113/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ec2aa8-683c-a1d9-9d92-0000e5ca2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_av","pattern":"[url:value = 'http://95.155.151.113/sensi_av']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ead42f8-b97d-a996-196b-00002589954a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/netgear.sh","pattern":"[url:value = 'http://95.155.151.113/netgear.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f488b86e-cebd-dc22-2958-000079408cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/hnap.sh","pattern":"[url:value = 'http://95.155.151.113/hnap.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34ef9f8-77ca-9711-f4d0-00001bbb5176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi","pattern":"[url:value = 'http://95.155.151.113/sensi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49e2663-4d9a-584f-69f2-00006a8e0d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tbk","pattern":"[url:value = 'http://95.155.151.113/sensi_tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e327a6c-4f75-7b07-3fcc-0000a8bcb788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm64","pattern":"[url:value = 'http://95.155.151.113/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf573955-8031-0f13-d9da-0000658ae0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/bin.sh","pattern":"[url:value = 'http://77.236.74.65:45120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a259dc68-ebe2-166d-4fe6-00008d88bcd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/bin.sh","pattern":"[url:value = 'http://105.225.133.213:37257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9088a77-0a4e-3002-b4d8-00006a7fc331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/i","pattern":"[url:value = 'http://222.138.119.216:49346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619a19a3-2367-3eb4-5b3d-0000a49275b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/bin.sh","pattern":"[url:value = 'http://120.28.139.212:38655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53f4bab-253b-dfb3-0f1f-000084b04c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.10.252:39675/i","pattern":"[url:value = 'http://196.190.10.252:39675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a66bad-0179-7d33-7ec6-00009c6a3f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://39.80.60.21:60792/bin.sh","pattern":"[url:value = 'http://39.80.60.21:60792/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2609677-3666-ebd4-74b2-0000cf61775d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/bin.sh","pattern":"[url:value = 'http://110.138.134.69:46780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21ad689-7d27-16c7-c48c-00003092fee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.104.208:40454/i","pattern":"[url:value = 'http://182.127.104.208:40454/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f3508-a1c1-acdb-74b6-0000f385ebfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/bin.sh","pattern":"[url:value = 'http://175.107.229.126:33054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc882bc1-d491-a165-2803-0000f1084f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.10.48.253:40771/bin.sh","pattern":"[url:value = 'http://175.10.48.253:40771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8483f2c9-a7d4-b225-0285-00003833b940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/i","pattern":"[url:value = 'http://110.138.134.69:46780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc22e234-f700-7819-e1de-00006e3cd8b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/bin.sh","pattern":"[url:value = 'http://42.233.107.216:48024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1604ede-c738-3973-9085-000050295ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.34.254:59706/i","pattern":"[url:value = 'http://27.217.34.254:59706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12858d7-c97e-41df-cbfa-00003b67195c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/bin.sh","pattern":"[url:value = 'http://61.53.147.92:47128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ea6af6-ee42-09b8-5b45-00009af2c2c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/i","pattern":"[url:value = 'http://175.107.229.126:33054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81eb1ea8-f0ec-34cf-3c1c-0000c0844dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/i","pattern":"[url:value = 'http://61.53.147.92:47128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9fac03-1fa8-4d87-3dd3-00009432862a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d85233-6787-655e-55f2-0000d2de7b22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/","pattern":"[url:value = 'https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691d398f-b954-bb23-31cd-0000739df819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.183.61:57147/Mozi.a","pattern":"[url:value = 'http://115.55.183.61:57147/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664e8e6c-6792-38cd-4fbd-000081dfaede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/bin.sh","pattern":"[url:value = 'http://196.189.98.110:53335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ceb504-5158-71a3-011d-000016115819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/bin.sh","pattern":"[url:value = 'http://42.230.33.248:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdb35f7-c76f-4697-6801-0000f7cde9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279be813-6d77-b13d-9756-00001b6c6b88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://www.mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff7d1fd-b4f5-0cc6-ecd5-0000f2903663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/i","pattern":"[url:value = 'http://42.230.33.248:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8ea3eb-829c-18af-25a9-0000deeb3b4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/i","pattern":"[url:value = 'http://196.189.98.110:53335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83786f08-f93e-f98e-09f0-000046de9af3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/bin.sh","pattern":"[url:value = 'http://203.101.187.19:52053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e9063f-d647-3209-5ce9-000054cd1a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/bin.sh","pattern":"[url:value = 'http://210.208.111.2:36838/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e08419b-16a1-94ba-1a3b-0000e289e4c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/i","pattern":"[url:value = 'http://203.101.187.19:52053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa488ca-c4b9-a522-5b75-00004aaf2325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/i","pattern":"[url:value = 'http://113.231.229.97:60941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77d492e-0a16-6c18-53ca-0000c9aad74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/i","pattern":"[url:value = 'http://210.208.111.2:36838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fcb9ff-c1f5-fc93-325b-0000cbe2daf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/i","pattern":"[url:value = 'http://221.15.226.18:57698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84445c7a-2421-de2c-29f8-0000caaf3f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/bin.sh","pattern":"[url:value = 'http://221.15.226.18:57698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e5a871-af37-5824-0cff-000017fb670c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.21.60:54714/i","pattern":"[url:value = 'http://110.37.21.60:54714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0986c5e3-8a60-e511-ea6c-0000ed842e40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.252.205:60751/i","pattern":"[url:value = 'http://182.114.252.205:60751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3472f654-d668-15f2-e321-0000632e95dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/bin.sh","pattern":"[url:value = 'http://42.235.55.88:55713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3320e9-9b25-95a8-3615-00007811eb0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/bin.sh","pattern":"[url:value = 'http://61.52.138.43:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b63806-184a-7c63-5835-0000c566938f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/bin.sh","pattern":"[url:value = 'http://115.55.113.143:47041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cadd4e8-3070-4120-424a-00001eb41ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/i","pattern":"[url:value = 'http://61.54.194.76:45113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e4d60f-d771-c7ce-cf0a-00008f2f4623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/bin.sh","pattern":"[url:value = 'http://125.43.116.242:47371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0230e65-d7c3-5943-38d7-0000868e1029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.236.232:44430/i","pattern":"[url:value = 'http://115.55.236.232:44430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab4dfc7-8bd9-f1c2-11aa-0000aa3a6b54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/bin.sh","pattern":"[url:value = 'http://110.136.13.79:50906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ec8634-7270-8f87-1def-00001371997a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/bin.sh","pattern":"[url:value = 'http://110.36.11.225:51361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126f47e8-5d9f-8fd8-bf8d-000031b261af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/bin.sh","pattern":"[url:value = 'http://110.37.119.220:37643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b806b1c-8174-c8ba-a39c-00008afb2edd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/i","pattern":"[url:value = 'http://125.43.116.242:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530f9a47-edbb-865f-343d-00009ab2a1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/i","pattern":"[url:value = 'http://42.235.55.88:55713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335bdbd0-735b-2d4f-4841-0000e78ae405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/i","pattern":"[url:value = 'http://110.136.13.79:50906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0d4bf25-d07b-465b-57db-0000281365cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/bin.sh","pattern":"[url:value = 'http://115.50.144.52:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6831bfed-3008-1c89-9644-000067cfb478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.89:36540/i","pattern":"[url:value = 'http://110.37.119.89:36540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82a25a9-d2fe-27c3-6cad-000011973ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.229.247.64:58197/bin.sh","pattern":"[url:value = 'http://42.229.247.64:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64002448-4bc0-c879-cf71-00007b177814","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/i","pattern":"[url:value = 'http://115.50.144.52:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9152f7f4-c3f4-5f8b-9146-00009823d991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/i","pattern":"[url:value = 'http://219.157.18.143:41104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0825a89-2323-8e65-7aac-0000597032a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/bin.sh","pattern":"[url:value = 'http://182.119.58.252:48725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b07602-2355-cbce-588d-000045f6fc48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/bin.sh","pattern":"[url:value = 'http://123.9.241.164:43002/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26a8879-68b8-f0c6-ceb4-0000f16b8cb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/bin.sh","pattern":"[url:value = 'http://115.52.179.220:43157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cde4e69-7fdf-31cc-2ef7-0000bce128d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/i","pattern":"[url:value = 'http://123.8.17.147:53523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c117f0-fd2a-12c9-5360-0000a8524006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.190:43969/i","pattern":"[url:value = 'http://120.84.212.190:43969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec14fdc7-d659-2443-407d-0000db5e8e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/bin.sh","pattern":"[url:value = 'http://123.9.25.110:38551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95eb0f19-9e94-e4e0-39ac-000057c1fafb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.115.64:41484/i","pattern":"[url:value = 'http://219.156.115.64:41484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--019b08ff-fcb2-1fbb-d53c-0000e5eab186","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.236.157.223:50944/i","pattern":"[url:value = 'http://113.236.157.223:50944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd77960e-d483-34ce-2d01-00001792a11a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/i","pattern":"[url:value = 'http://42.230.24.112:44963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e4ce58-4fdb-62f0-ef23-000064c7e665","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/i","pattern":"[url:value = 'http://61.52.156.140:46601/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb57108-30e2-6a89-071d-0000774a1bfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/bin.sh","pattern":"[url:value = 'http://182.119.183.1:55955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471c0e38-ea48-3fba-78c7-0000548c8000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/bin.sh","pattern":"[url:value = 'http://219.157.212.157:59656/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19525b0a-6301-5ef6-ec2e-000025cb7426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.69:54758/i","pattern":"[url:value = 'http://115.48.149.69:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bd83f3-df43-b880-a854-0000e68a8c2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/bin.sh","pattern":"[url:value = 'http://42.178.164.205:52529/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c5c57-43ed-3add-0369-00009f8a3326","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/bin.sh","pattern":"[url:value = 'http://39.74.52.248:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545a2b8-6d9c-b1d3-7b4e-0000a5bc8137","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/i","pattern":"[url:value = 'http://39.74.52.248:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856f8e47-cbd0-1fa9-d055-0000f9ae1762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/bin.sh","pattern":"[url:value = 'http://144.48.123.149:50607/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8941921b-9944-456a-23c5-0000a6a99028","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/bin.sh","pattern":"[url:value = 'http://113.239.96.147:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e82399e-554f-d56f-cddd-00000ec9bfdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/i","pattern":"[url:value = 'http://42.227.204.129:58208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd3af35-3c7d-3fc9-e59b-0000e0934116","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.183.107:44703/i","pattern":"[url:value = 'http://222.140.183.107:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cb039f-b63b-8f98-6456-000025a2f2e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/i","pattern":"[url:value = 'http://123.14.54.13:58614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef9c33-5c04-52c2-4661-00003f1a2416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/bin.sh","pattern":"[url:value = 'http://42.177.186.117:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf81cb3-eb19-8005-4caf-0000667f2249","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.149.49:57320/i","pattern":"[url:value = 'http://115.62.149.49:57320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6dda6fd-6dcc-8ca7-69e6-0000495510cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/i","pattern":"[url:value = 'http://110.37.12.8:38162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39dd229-cb5b-dbfc-7c58-0000fe5a7056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:48636/bin.sh","pattern":"[url:value = 'http://182.114.192.237:48636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b527979b-d22e-beac-634b-00009e3abbbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/bin.sh","pattern":"[url:value = 'http://119.184.29.187:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea9e913-0c47-5a34-4756-0000caa00b00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:41202/i","pattern":"[url:value = 'http://110.37.58.92:41202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897c8ef4-27a8-5725-0251-0000ba0816f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/i","pattern":"[url:value = 'http://119.184.7.234:46382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6a17ae-610f-d960-c949-00008f74393f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.99.250.225:49416/i","pattern":"[url:value = 'http://119.99.250.225:49416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb8d6f1-6730-c346-3be3-000052a80512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/bin.sh","pattern":"[url:value = 'http://125.43.0.79:34827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f395de7-6453-72b9-3ccc-000008cb28b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.249.68.67:57560/bin.sh","pattern":"[url:value = 'http://112.249.68.67:57560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00cbcc74-d7c2-5a42-85e7-0000cc770658","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/i","pattern":"[url:value = 'http://115.55.9.151:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d377d0-1144-b68b-ea7c-0000065b1c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/bin.sh","pattern":"[url:value = 'http://222.137.213.31:48901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcf7185-4fdd-3e54-6372-00002e770b5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.242:35671/i","pattern":"[url:value = 'http://120.84.214.242:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646fdca9-13ca-7e5a-f53c-0000d25fd5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.125:40164/i","pattern":"[url:value = 'http://120.84.214.125:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e40f14f-91dd-9eca-a46c-0000f4cb1e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/i","pattern":"[url:value = 'http://42.53.72.145:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf17a54e-814b-959a-6109-0000ded128b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/bin.sh","pattern":"[url:value = 'http://117.24.218.134:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--258652c1-f17b-6d90-2b80-0000e84da03f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/i","pattern":"[url:value = 'http://115.55.29.170:41884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ab8c0e-3a8f-ea00-d69e-000028dac55a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/bin.sh","pattern":"[url:value = 'http://115.54.124.37:33179/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b523854e-fc41-79ab-0f9a-00006ae1f8ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/i","pattern":"[url:value = 'http://182.116.113.119:44177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce14d5e-5bda-9ffb-56ef-0000008ea58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.228.235:44677/i","pattern":"[url:value = 'http://182.121.228.235:44677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695ecf28-381c-a972-fb6c-00000299e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/bin.sh","pattern":"[url:value = 'http://123.8.17.147:53523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eac8bf0-1817-5cfe-600a-000046a59813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/bin.sh","pattern":"[url:value = 'http://115.55.29.170:41884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7329dffa-30cf-b403-decc-00000837f267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/i","pattern":"[url:value = 'http://115.54.124.37:33179/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b5c8df-7503-67d3-43fc-0000ca8b2d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/i","pattern":"[url:value = 'http://117.24.218.134:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d6a9ac-34c9-48b3-d0ae-000034619112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://179.108.89.220:43996/i","pattern":"[url:value = 'http://179.108.89.220:43996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c399cb0b-0729-7ad1-c055-000059fe8fe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/i","pattern":"[url:value = 'http://42.53.51.109:44329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2505f3bc-8f63-6b52-26b6-000077c9040e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/bin.sh","pattern":"[url:value = 'http://103.160.130.178:50403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910ebfc4-4d85-9095-4234-0000e635e4d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/bin.sh","pattern":"[url:value = 'http://119.184.7.234:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9540d428-9b59-637e-7b60-000051a013e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/i","pattern":"[url:value = 'http://42.178.164.205:52529/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--395825aa-53d3-0139-0027-0000adda9400","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/bin.sh","pattern":"[url:value = 'http://222.134.172.2:44618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e01474-12ed-982d-3f3e-0000292ab0cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/bin.sh","pattern":"[url:value = 'http://125.47.244.3:55442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa44a6-7dd6-c61c-f683-00008b95a4f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/i","pattern":"[url:value = 'http://125.43.0.79:34827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0463d5b8-5252-a6eb-f9c8-000017cfebba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/bin.sh","pattern":"[url:value = 'http://42.225.206.253:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba55477-52a4-0f50-198d-0000dda3f477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/bin.sh","pattern":"[url:value = 'http://115.55.9.151:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f737d6-7dd2-ab9f-7c1c-0000ceaccba1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.85.6.186:59524/i","pattern":"[url:value = 'http://42.85.6.186:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee43bf-f79e-5f7c-834a-0000a6922fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/i","pattern":"[url:value = 'http://123.9.241.164:43002/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e202ba-f7d3-0bd2-dde7-0000408ddf7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/i","pattern":"[url:value = 'http://182.112.39.204:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c505ec1-ed29-d7c1-49e8-00002b48988b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/i","pattern":"[url:value = 'http://115.58.171.191:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10573983-14d6-1abd-0ca9-0000ec8ea98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.126:36545/i","pattern":"[url:value = 'http://120.84.214.126:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c07905c-2a2e-6b94-c3f8-00007ef58def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/i","pattern":"[url:value = 'http://59.103.116.68:54641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fbdeee-2191-ee1f-e02a-000062de7b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/i","pattern":"[url:value = 'http://42.230.35.149:47141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66582c2f-a1e9-d753-2d59-00009be6f67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.239:50468/i","pattern":"[url:value = 'http://123.14.181.239:50468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ee9e09-d304-571d-c26a-000053d7165f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/bin.sh","pattern":"[url:value = 'http://194.28.62.99:10819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e297851-b6b4-e9a3-9964-00003c5c6ac5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/i","pattern":"[url:value = 'http://42.224.197.152:60373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573a92ec-4010-0e20-13f9-0000d1f55d17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.27:59432/i","pattern":"[url:value = 'http://163.142.95.27:59432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878c17e-c5d4-bc46-7d42-000026261f3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/bin.sh","pattern":"[url:value = 'http://180.252.209.203:43259/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4e7d78-50a4-fc17-b578-0000a56117d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/bin.sh","pattern":"[url:value = 'http://42.224.197.152:60373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0d9152-f264-462f-b665-00008da5783d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/bin.sh","pattern":"[url:value = 'http://175.172.13.19:60669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824162b-3db2-9513-e5da-0000e0f5bde1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.134.211:38080/i","pattern":"[url:value = 'http://42.227.134.211:38080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b87c0cb-3f9a-848e-f414-0000d1aafde9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/i","pattern":"[url:value = 'http://123.9.25.110:38551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5f750-eedd-4034-050e-000013570a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/i","pattern":"[url:value = 'http://115.52.179.220:43157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0220546b-1c9f-d8d1-1734-0000554dd9f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://82.48.207.52:56706/i","pattern":"[url:value = 'http://82.48.207.52:56706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3471a5b-6ed5-aa3b-9b2f-0000cc0aaad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/bin.sh","pattern":"[url:value = 'http://110.37.12.8:38162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d53d7ff-9470-c478-144b-000076f522f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/i","pattern":"[url:value = 'http://42.86.172.171:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac30105-e451-93fc-6ae4-0000e9cb25e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/i","pattern":"[url:value = 'http://36.48.41.248:36948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d94156-0bc2-cdd6-2565-00008a2a036e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/i","pattern":"[url:value = 'http://222.137.213.31:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cadaaa3c-f27f-73e9-b556-0000ebe93639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/i","pattern":"[url:value = 'http://120.28.139.212:38655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae704fc3-9107-6d86-f214-0000407b4fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/bin.sh","pattern":"[url:value = 'http://27.217.3.109:54209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c95d85-8318-7156-5bf2-0000fe25c57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/bin.sh","pattern":"[url:value = 'http://42.53.72.145:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c952a5-48ba-26f5-1c90-000041f09ff6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/bin.sh","pattern":"[url:value = 'http://61.52.7.68:35582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e803e282-5eb2-9b64-255f-0000e3864a7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/i","pattern":"[url:value = 'http://119.184.29.187:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cebd55f-450f-8d41-0c04-0000580126d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/bin.sh","pattern":"[url:value = 'http://125.44.219.81:55457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25003732-4df4-e084-e1db-0000439ed441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/i","pattern":"[url:value = 'http://180.252.209.203:43259/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d507c9-e543-f471-12ef-0000d3f058d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/i","pattern":"[url:value = 'http://194.28.62.99:10819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7027cb1d-688f-7a25-5f75-00006d8cce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/i","pattern":"[url:value = 'http://36.69.80.149:33303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e77f790-b663-e26c-8d86-00009cf96eb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.26.190:34325/i","pattern":"[url:value = 'http://182.127.26.190:34325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67108d42-3d87-d4dc-6dad-000014f2ea05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/i","pattern":"[url:value = 'http://182.124.41.91:59176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0c01b8-12ea-0cf2-aca8-00002f9697f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/bin.sh","pattern":"[url:value = 'http://182.124.41.91:59176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9729c0-0b69-7912-9854-00004ff44a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/bin.sh","pattern":"[url:value = 'http://36.69.80.149:33303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4843cea-4a89-1303-82c0-0000c9252eca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/i","pattern":"[url:value = 'http://42.178.26.93:60244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086b3802-10cf-a98c-611e-00003a0d95e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/bin.sh","pattern":"[url:value = 'http://182.116.113.119:44177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff044469-3691-a714-d9a2-00002008fbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/i","pattern":"[url:value = 'http://175.148.29.181:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99766cf-dbc6-d518-f65c-000033495efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/i","pattern":"[url:value = 'http://112.255.6.104:51842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3208225a-c0ea-d62d-2725-00003c3420e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.121.138.211:6609/linux","pattern":"[url:value = 'http://47.121.138.211:6609/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c868df9-e5b2-101e-aad7-0000c495cdee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.178.215:39984/i","pattern":"[url:value = 'http://182.121.178.215:39984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d671147-a4ad-4edc-64d3-000001ac094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/bin.sh","pattern":"[url:value = 'http://42.178.26.93:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0aa44dc-9405-c49c-adeb-0000d2f349ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/bin.sh","pattern":"[url:value = 'http://61.54.194.76:45113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db8c08f-b0c2-f98d-d4c4-0000105ff5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.95.255.56:6610/linux","pattern":"[url:value = 'http://47.95.255.56:6610/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4b8422-41eb-c764-bcc3-0000715e129d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/bin.sh","pattern":"[url:value = 'http://59.103.116.68:54641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15fa3dd-bd6d-c306-230c-00000fd94063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/bin.sh","pattern":"[url:value = 'http://78.178.118.193:47288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1dc53c1-8f8d-b5eb-ed56-00007ae82940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/i","pattern":"[url:value = 'http://110.37.119.220:37643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae719a5d-bf25-72c5-2b19-00003cbedbd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/i","pattern":"[url:value = 'http://78.178.118.193:47288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6956bf25-2e0a-d51a-e8bb-00002ba5877a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfb9efa-028f-06ac-5160-000089883f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/lkxstress.sh","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfdca956-c59c-9962-1b9f-00006ce78e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8e0829-40b5-fbb8-5d5c-000001331c62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d5f8ec-5ef3-2655-be2a-00007e5221d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d2c87a-a74d-73e5-87c6-0000c6ee46b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54c8c93-9593-1ff8-19d6-0000e37f993e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233e5c0e-9da4-df0c-a62c-000029876774","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b986e610-99b0-6f77-df3f-0000e4af9418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee9222-ca79-6e25-3ee5-0000cb7af049","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46edbb0-4106-2e20-5b90-0000f9eeebe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aad2c6-b974-6ba0-fa33-0000e45942c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5c6093-179c-599a-a5bd-00000c033525","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4078140f-10b3-d898-158b-00008f5a2c88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13c39e7-3702-b102-6fa4-000079307217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf0d0ba-c6b6-7d4b-accf-0000003a0986","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/bin.sh","pattern":"[url:value = 'http://175.149.65.165:37215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da404bc-4ecc-34ce-c5da-00008de5e062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/lkxstress.sh","pattern":"[url:value = 'http://170.205.31.25/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee491a25-47bb-ba80-289c-000075ddc2a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.i686","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dd94ed-ac5b-9cc2-0386-0000b803e712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mips","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e6345-94c1-a63e-5b6f-000010213f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba2bec7-80b8-263b-7ae7-000022088402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eae2ad7-c2b9-ae32-85ee-000022b524f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c835828-7dfe-de10-d333-0000c4fb571c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca58e51-5c34-d83b-494c-00009ab4e367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02abef7d-6144-4d92-662f-000030bd2bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017c8112-3776-74f1-194b-000090ffa6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0f5224-e716-d58a-3e68-0000d3008958","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceb0dc-af2d-de4e-15c5-0000e8fcc8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91607d0-6ce9-2a69-c1e2-0000c26a53c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f1a03b-b842-ce8c-f073-0000b8f531c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f62dee95-23e3-bfd6-1000-00008a8cbd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ccb890c-b663-b9f7-66be-00001b9b84ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/bin.sh","pattern":"[url:value = 'http://210.208.110.221:38824/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a22e36-8cd9-71cc-c833-0000e74f17f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.61:48371/i","pattern":"[url:value = 'http://120.84.212.61:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922b9669-1125-96f6-cb73-000038d7614f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/i","pattern":"[url:value = 'http://175.149.65.165:37215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf93491-2a0b-95d3-3d94-000077ec2eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.30.11:33676/i","pattern":"[url:value = 'http://125.42.30.11:33676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a63f62b-149d-14da-9769-000056339a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/i","pattern":"[url:value = 'http://210.208.110.221:38824/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f3076e-7453-087a-66b4-0000ddca96e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/bin.sh","pattern":"[url:value = 'http://61.54.205.42:41895/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e5cca2-8696-7c02-fc61-000099a542ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.48.165:35638/i","pattern":"[url:value = 'http://182.116.48.165:35638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9f2981-f67e-92dd-24ca-0000307725fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/i","pattern":"[url:value = 'http://61.54.205.42:41895/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd6a855-3b0e-50ba-3a40-0000976fe81e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/bin.sh","pattern":"[url:value = 'http://42.226.237.118:47311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59efd8b3-61f4-c9dd-7872-00004a3ab540","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/i","pattern":"[url:value = 'http://42.226.237.118:47311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306715a3-0639-b905-6a74-0000cb2bb448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/i","pattern":"[url:value = 'http://112.248.106.46:52448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a70bd27-09ff-69fa-3769-0000c81ab438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9fe27c-fae5-4487-f954-0000a565cbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip","pattern":"[url:value = 'https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7c42d6-8391-a54f-5717-0000e68e1cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/4E_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/4E_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd3eae0-24ac-ad6e-72af-0000e6df0d19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar","pattern":"[url:value = 'https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4421b41f-6b98-75c5-889c-00002fccda45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Radium_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Radium_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a692c6c2-222a-261b-da51-0000e5fc8586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd78c91-7a2e-4132-2cd8-000087260752","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/krypton.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/krypton.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ec4ed0-a9a4-a3ba-f2ad-0000beb9bc81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi","pattern":"[url:value = 'https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2251067f-321c-6a22-75c1-0000e1edac05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.148.24:8081/lol","pattern":"[url:value = 'http://176.65.148.24:8081/lol']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49820e7-72a8-1062-8644-0000338bbceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/bin.sh","pattern":"[url:value = 'http://175.167.254.183:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7aa20-8f62-ec69-ed9e-0000d061619b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:55129/bin.sh","pattern":"[url:value = 'http://118.232.137.101:55129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b2e10d-bbc7-5433-3aaa-00009ea4c621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/bin.sh","pattern":"[url:value = 'http://36.48.41.248:36948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae02836b-ac22-7b00-66f2-00004e54cb65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/i","pattern":"[url:value = 'http://175.167.254.183:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0a7018-49f5-aa66-33f4-000029a92711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/bin.sh","pattern":"[url:value = 'http://121.231.139.26:36392/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947e0b62-baf2-143a-60ab-0000eb6cdf84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/bin.sh","pattern":"[url:value = 'http://112.255.6.104:51842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb034404-7d10-a382-6d17-0000fe633622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/bin.sh","pattern":"[url:value = 'http://61.52.118.142:40829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622ba13a-afe6-756d-4f3e-0000c62a5162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/i","pattern":"[url:value = 'http://61.52.118.142:40829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b158945e-9acc-41fd-4ec9-0000e2c9d07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/bin.sh","pattern":"[url:value = 'http://42.230.24.112:44963/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2169560e-4207-03a6-7a76-000026674bab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/bin.sh","pattern":"[url:value = 'http://115.55.150.155:57147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797f53ae-fdef-e789-0443-000076bc5787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/i","pattern":"[url:value = 'http://115.55.150.155:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9a690a-add8-eaac-454e-00005d046a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/bin.sh","pattern":"[url:value = 'http://111.127.232.172:44915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd84a120-8dab-bc57-c4ee-000091f2c902","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/bin.sh","pattern":"[url:value = 'http://210.208.111.36:51347/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1949b58-37c5-b0e6-438e-0000f30e3eeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/i","pattern":"[url:value = 'http://123.13.106.196:55036/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cbe069-1f96-7533-92bb-0000e1b85d40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/bin.sh","pattern":"[url:value = 'http://115.197.132.72:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e32b50-0b0b-ee4c-fdda-0000d7b92571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/i","pattern":"[url:value = 'http://210.208.111.36:51347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4349cd-750a-2adb-681b-0000a36fa4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/bin.sh","pattern":"[url:value = 'http://123.12.230.16:46574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8884ef9-70eb-a000-c367-0000c3fa64d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/i","pattern":"[url:value = 'http://123.12.230.16:46574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca07ec6-73ff-a9a3-79a8-0000063e58a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/i","pattern":"[url:value = 'http://123.10.145.33:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d4d40-ca09-ff29-c95d-0000ef8ff416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/i","pattern":"[url:value = 'http://110.36.11.225:51361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ff112f-b2bb-5686-0710-0000b9bc884d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mipsel","pattern":"[url:value = 'http://109.248.160.75/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a25a51-4d03-ed79-17b7-0000e1847613","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d510662-ba9e-976f-96d5-0000f5139c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mips","pattern":"[url:value = 'http://109.248.160.75/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45b34be-25e0-32e9-c071-00007c25edeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/bbc","pattern":"[url:value = 'http://109.248.160.75/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27277df2-d505-e64e-3934-00007dad50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm5","pattern":"[url:value = 'http://109.248.160.75/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e990b48-8ac9-0f70-3605-0000e0d86b73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86_64","pattern":"[url:value = 'http://109.248.160.75/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2e2c48-35e0-241e-723b-00006f18ff09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm6","pattern":"[url:value = 'http://109.248.160.75/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9291cde-05e7-5877-581a-0000d7a4986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm7","pattern":"[url:value = 'http://109.248.160.75/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8e9f6e-af28-94cd-d85d-00004ae69bb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86","pattern":"[url:value = 'http://109.248.160.75/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1162131b-4aa3-b0bf-ee06-0000265648c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_aarch64","pattern":"[url:value = 'http://109.248.160.75/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d73fcf-12cb-77f8-0879-00002eecf9dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_powerpc","pattern":"[url:value = 'http://109.248.160.75/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50204d64-54c0-73a3-c46c-0000c5113782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm4","pattern":"[url:value = 'http://109.248.160.75/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9270af4-4b6c-ea56-5fea-0000195ec3fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/i","pattern":"[url:value = 'http://111.127.232.172:44915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460a383-877f-742b-827b-0000df9d6e31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/i","pattern":"[url:value = 'http://130.12.209.147:55609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71aad826-e1b0-7a72-0d52-0000b7547a6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/bin.sh","pattern":"[url:value = 'http://123.12.244.28:44252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--052d0565-ab09-859d-3674-000082c2e450","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/bin.sh","pattern":"[url:value = 'http://222.140.176.80:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4203f1a-2339-ded4-5cdb-000086776938","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/i","pattern":"[url:value = 'http://42.235.79.41:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90c2296-d767-b24f-bf1a-0000a3ec8b2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://143.246.195.33:48973/systemdd","pattern":"[url:value = 'https://143.246.195.33:48973/systemdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7e6e2c-74ac-cf01-e027-000089e2e017","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/i","pattern":"[url:value = 'http://222.140.176.80:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b464da6d-8d85-ed07-4559-0000857195bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/i","pattern":"[url:value = 'http://123.12.244.28:44252/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd50d46-c2a4-1810-9f97-0000c376ece6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/bin.sh","pattern":"[url:value = 'http://221.15.186.19:46271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551cdc2c-085b-dc61-a8db-0000fcad2c23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/i","pattern":"[url:value = 'http://221.15.186.19:46271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6d4d8c-555d-8e0a-b8ac-00006a8d8b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/i","pattern":"[url:value = 'http://175.151.82.88:52513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e0cf2-f80e-7de4-ebda-00004489e1bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.152.237:50318/i","pattern":"[url:value = 'http://115.55.152.237:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4293f644-81fd-1d2a-bbea-0000a805e435","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/bin.sh","pattern":"[url:value = 'http://123.5.150.18:40732/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a29db3-2b6f-6f89-a7f0-0000cf5933fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/bin.sh","pattern":"[url:value = 'http://103.31.103.204:36161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f13b653-dbaa-940b-a4f1-0000acad9db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.46:39695/bin.sh","pattern":"[url:value = 'http://39.90.145.46:39695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10452def-8ebe-f9fc-c6b4-000070543dd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.91.33:34772/i","pattern":"[url:value = 'http://110.36.91.33:34772/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf5f310-5223-2091-db6d-00001a16520f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/i","pattern":"[url:value = 'http://105.225.133.213:37257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b728e10-0312-bca5-14f7-0000f35b4310","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.11:59440/i","pattern":"[url:value = 'http://61.52.217.11:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e8db8-8a53-d828-d6c0-00001b1c40a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/bin/support.client.exe","pattern":"[url:value = 'https://37.77.150.120/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a1aa40-7d6d-1d48-fd2d-000071d50f17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/update.ps1","pattern":"[url:value = 'http://45.141.119.82/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e74e0c-074d-d1f8-fea4-0000adf8a91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/setup.exe","pattern":"[url:value = 'http://45.141.119.82/setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b2f821-9a73-e50a-85bb-000034f3d02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--069f13f2-38a6-3ee5-bbd7-000043692d51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/bin.sh","pattern":"[url:value = 'http://113.221.9.116:54492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e34963-3a9c-7cba-774d-0000a65f7791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/i","pattern":"[url:value = 'http://113.221.9.116:54492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc62826e-7f63-6584-bec8-00001c365985","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/bin.sh","pattern":"[url:value = 'http://36.69.66.139:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9537c747-3423-d154-a7a1-0000bda53af8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/i","pattern":"[url:value = 'http://61.53.220.232:55420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc43fc3-5d44-de6e-5b63-0000a34841ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/i","pattern":"[url:value = 'http://115.62.148.107:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55dca9cb-a723-51a9-b300-0000992ca505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/bin.sh","pattern":"[url:value = 'http://42.239.150.240:43603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9393a05-7cec-2ad0-6e3a-00008811d18d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/bin.sh","pattern":"[url:value = 'http://103.249.199.3:49338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0ddfff-8492-e136-fcf7-000032ffd4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/i","pattern":"[url:value = 'http://103.249.199.3:49338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6909ddf9-55c8-73c7-b9b3-000003290e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/i","pattern":"[url:value = 'http://36.69.66.139:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9efd1d8-4af0-b68e-3250-0000df7a2a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/bin.sh","pattern":"[url:value = 'http://123.188.44.167:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263ab5be-cef9-7dcf-9a5b-0000640815dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/i","pattern":"[url:value = 'http://123.188.44.167:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740f7a7b-0f86-ea38-fac6-0000e9bd4e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/bin.sh","pattern":"[url:value = 'http://110.39.230.1:53552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1059c34-b744-7457-1e5b-00007a8a399a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/i","pattern":"[url:value = 'http://110.39.230.1:53552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42173fdd-5ad0-ced5-e32d-0000aa2a4c74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/i","pattern":"[url:value = 'http://110.37.43.119:55539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a90b20-4601-49d0-0a07-000080c5c101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/i","pattern":"[url:value = 'http://42.239.150.240:43603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59723473-7d9c-9b6f-d36c-0000a7e07019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.192.190:48972/i","pattern":"[url:value = 'http://60.23.192.190:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2335cd-0460-5345-d6af-00006d57f3e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/bin.sh","pattern":"[url:value = 'http://115.55.218.67:53176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e093e97f-33de-b11d-5dc1-00004d61e078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/bin.sh","pattern":"[url:value = 'http://115.202.187.105:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f10dbf-0835-a518-6634-0000456040e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bb5810-1964-b924-b7e7-0000c6815b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/bin.sh","pattern":"[url:value = 'http://182.121.9.194:56154/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abfa63f-937e-1498-fc1a-000078c252fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/bin.sh","pattern":"[url:value = 'http://110.37.61.166:59222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4b0e7c-17ae-be30-62aa-0000d6106183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/i","pattern":"[url:value = 'http://110.37.61.166:59222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4275fa48-63ce-c79b-7533-000044c31510","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/i","pattern":"[url:value = 'http://182.121.9.194:56154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47493451-331f-ed72-1b98-00002d220bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/bin.sh","pattern":"[url:value = 'http://203.101.187.5:58359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a7581-cbf0-e5fd-1f93-0000f61921b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/i","pattern":"[url:value = 'http://203.101.187.5:58359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ce6c9b-e8a0-79d2-ef5a-0000b0a4d947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/i","pattern":"[url:value = 'http://115.202.187.105:58599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27fa877-73da-9f30-465f-000003ac6195","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.26.181:34146/bin.sh","pattern":"[url:value = 'http://175.175.26.181:34146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9628c7-e9b3-1d24-65c8-000024a75dbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm6","pattern":"[url:value = 'http://85.11.167.197/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1889e20a-d20b-3bb2-6102-000001cd6a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mipsel","pattern":"[url:value = 'http://85.11.167.197/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c420f58-f300-a109-9cf3-0000899306e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/ppc","pattern":"[url:value = 'http://85.11.167.197/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a911851-6dbe-1340-3457-00009c1b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm7","pattern":"[url:value = 'http://85.11.167.197/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c5363b-da04-4c68-03ef-0000be5ae877","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/m68k","pattern":"[url:value = 'http://85.11.167.197/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee902ed-426e-bc28-28c4-0000beac3ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mips","pattern":"[url:value = 'http://85.11.167.197/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4910ed0f-3e16-467a-10fb-0000094d9f1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/sh4","pattern":"[url:value = 'http://85.11.167.197/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39849eb-6522-fd8e-e4d8-00008eae9536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm4","pattern":"[url:value = 'http://85.11.167.197/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c9c29-3be9-b73e-e60d-0000fa1032b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pm68k","pattern":"[url:value = 'http://194.26.192.173/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b71cc0f-a752-237b-bc8c-0000bf67dbf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/px86","pattern":"[url:value = 'http://194.26.192.173/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84df82d5-c918-db11-a87b-000060ed877d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm6","pattern":"[url:value = 'http://194.26.192.173/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea97b03-5122-bd51-e0b7-000095f140e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm","pattern":"[url:value = 'http://194.26.192.173/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8b243-8add-8c12-6222-0000d851e018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm7","pattern":"[url:value = 'http://194.26.192.173/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4233a2-4212-4c9d-7c5c-0000423389c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/x86_64","pattern":"[url:value = 'http://194.26.192.173/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92726e36-92a0-517e-42e7-000091e58a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pmpsl","pattern":"[url:value = 'http://194.26.192.173/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4854398-02b8-f063-34a6-000041f0c72b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pspc","pattern":"[url:value = 'http://194.26.192.173/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3911f96-c3e9-1711-fce4-000047ba2c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/psh4","pattern":"[url:value = 'http://194.26.192.173/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9745f3bc-797e-4fe0-46bf-00000115452c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/i","pattern":"[url:value = 'http://115.55.218.67:53176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71020d31-b860-3c3c-53ea-00008a7fd519","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/bin.sh","pattern":"[url:value = 'http://110.36.25.33:45137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc98e404-e25f-9a48-a058-000037b9c010","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/i","pattern":"[url:value = 'http://110.36.25.33:45137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3de9b7-7f1b-2f30-0caa-0000e3b3a970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:40215/i","pattern":"[url:value = 'http://120.28.193.113:40215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d5f4d9-d803-6377-427f-0000f047498a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.187.39.131:39653/i","pattern":"[url:value = 'http://2.187.39.131:39653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08f569b-3a5f-58a0-e632-000094d6766c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/i","pattern":"[url:value = 'http://42.230.41.97:51870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18510372-756e-463b-401d-00009442cb29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/bin.sh","pattern":"[url:value = 'http://36.69.86.82:33719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955fd729-71cc-6fe1-43cd-0000f64727e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.7.221.147:56994/i","pattern":"[url:value = 'http://123.7.221.147:56994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83550919-9146-2f43-515e-00002d42c3e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/bin.sh","pattern":"[url:value = 'http://42.235.79.41:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21240cf-91fa-4193-5e30-00006d45aa4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/i","pattern":"[url:value = 'http://123.12.234.37:36560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e0bbe6-362e-a631-127f-0000fe227ca7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/i","pattern":"[url:value = 'http://36.69.86.82:33719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e322413-04a7-45d9-1e7c-0000d329e8df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/bin.sh","pattern":"[url:value = 'http://103.146.110.122:34125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adfcceb-a28f-244b-e13e-000020e22d82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/bin.sh","pattern":"[url:value = 'http://112.238.178.200:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60ae0b-23d7-382a-6bdb-000085155a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/i","pattern":"[url:value = 'http://112.238.178.200:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c281c-96f7-4859-e7cb-0000f8139c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.98.147.69:54271/bin.sh","pattern":"[url:value = 'http://115.98.147.69:54271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521512f5-9a6a-6da3-7f4b-0000525060ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/i","pattern":"[url:value = 'http://103.146.110.122:34125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d155dcb3-7100-bb0c-eb4b-000005e22a5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7061144442/nxumfOe.exe","pattern":"[url:value = 'http://62.60.226.140/files/7061144442/nxumfOe.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73297b44-4430-cc01-8f76-00000d9c5890","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:45025/i","pattern":"[url:value = 'http://196.190.133.180:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c03ec0f-f7de-871e-c941-000094e8efc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/i","pattern":"[url:value = 'http://125.43.107.232:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0f6add-cf62-0aeb-5593-00007e8a7dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/bin.sh","pattern":"[url:value = 'http://175.165.87.184:46171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a62dbe5-c28e-4c5d-1d57-00009a2f4b1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/bin.sh","pattern":"[url:value = 'http://123.13.142.66:59668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd0cd72-0c49-323d-6aeb-00005b84825a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/i","pattern":"[url:value = 'http://219.157.202.104:39615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287971a6-69b4-6b9f-ffb2-0000367ee57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/i","pattern":"[url:value = 'http://175.165.87.184:46171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b138978-ef78-0ab4-28fb-0000c06b1ef1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/bin.sh","pattern":"[url:value = 'http://123.10.145.33:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15e070-6e83-7088-2eec-000093243ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/bin.sh","pattern":"[url:value = 'http://182.123.40.234:41791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022fa51a-568a-ff26-af69-00009d6616ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/bin.sh","pattern":"[url:value = 'http://119.179.237.64:40459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83224bd-458a-c5ba-18cf-000000cf9873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/i","pattern":"[url:value = 'http://123.13.142.66:59668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dcf73f-47cd-22d6-1601-00000fd90ee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/bin.sh","pattern":"[url:value = 'http://222.140.161.119:54327/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae837782-05ce-66d7-fbef-00000208b745","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/i","pattern":"[url:value = 'http://123.14.193.241:34414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4f2eeb-70cb-537d-1009-0000bca52f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/bin.sh","pattern":"[url:value = 'http://123.13.106.196:55036/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e346e63f-5548-09dc-5baa-00004cda572f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/bin.sh","pattern":"[url:value = 'http://219.157.202.104:39615/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbed55e-2419-9cda-4b86-000042c2e9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/bin.sh","pattern":"[url:value = 'http://110.36.13.229:41730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360d6703-4701-d979-90e0-0000a23d7a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/i","pattern":"[url:value = 'http://42.234.166.234:40751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37adc380-7a66-1f4e-67a9-00005df305c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/i","pattern":"[url:value = 'http://119.179.237.64:40459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe3c6e-ff16-ad98-f810-00009fc90532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/i","pattern":"[url:value = 'http://110.36.13.229:41730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e5d3d1-a5ba-8314-5622-000002489a66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.252.196.44:41579/i","pattern":"[url:value = 'http://112.252.196.44:41579/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb35d5e-9a81-335b-42bd-0000cf298724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ea9eb6-6107-a06a-8345-00009ab86b9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/bin.sh","pattern":"[url:value = 'http://36.71.24.56:48673/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0410252b-eeed-812d-bf4d-0000352a2c28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/bin.sh","pattern":"[url:value = 'http://182.113.206.76:59535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6083d4e8-2ea8-1269-f6d0-0000c2621657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/bin.sh","pattern":"[url:value = 'http://110.37.39.88:32921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58bf902-1973-90e6-3b39-000048e69129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/i","pattern":"[url:value = 'http://36.71.24.56:48673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d8dec4-2ae3-32ba-803d-0000f563c9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/bin.sh","pattern":"[url:value = 'http://115.48.44.116:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b426959-f73b-11ea-f2b8-0000bbf6a058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/i","pattern":"[url:value = 'http://182.113.206.76:59535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede9c7de-b587-07e4-9f80-00002e0c462c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/bin.sh","pattern":"[url:value = 'http://110.36.70.189:53510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde65836-d4b9-5a3e-e723-0000ef9b4c20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/bin.sh","pattern":"[url:value = 'http://110.37.89.210:38147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a990e2-8cda-04bb-db4d-0000805bd085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/i","pattern":"[url:value = 'http://110.37.39.88:32921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fafa69-a67c-6152-6c5d-0000004ba761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.181.201:51235/bin.sh","pattern":"[url:value = 'http://222.138.181.201:51235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a240dc8a-04da-ac28-c3c0-0000438510d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/i","pattern":"[url:value = 'http://110.36.70.189:53510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12177447-16d1-fe38-a003-00004923e7cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/bin.sh","pattern":"[url:value = 'http://42.232.231.254:56762/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab9b57f-23ee-585d-39b2-000080d43b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/i","pattern":"[url:value = 'http://115.48.44.116:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7b8d1b-5f30-2a0d-dec9-0000adff4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/i","pattern":"[url:value = 'http://110.37.89.210:38147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719635a4-6358-99d9-0050-0000915a44a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/i","pattern":"[url:value = 'http://42.235.75.164:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e33271-4b4a-4d3a-9b02-00007536a083","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/i","pattern":"[url:value = 'http://222.140.161.119:54327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aca6b0-8663-f8e0-ad5a-000016154f30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/bin.sh","pattern":"[url:value = 'http://175.153.92.244:48563/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1530046-eef6-1aff-8963-00007203b443","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/i","pattern":"[url:value = 'http://125.44.47.23:54371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9c0f0e-94a6-c02a-4b09-000080c9ab3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/bin.sh","pattern":"[url:value = 'http://182.117.165.9:33305/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14575b1e-51c9-0df1-7342-00004e8e8b08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/i","pattern":"[url:value = 'http://42.232.231.254:56762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacde5cb-0e55-f4d6-e79f-0000af508511","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/bin.sh","pattern":"[url:value = 'http://61.53.220.232:55420/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3ee397-5b56-bb06-2404-0000b8185600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/i","pattern":"[url:value = 'http://175.153.92.244:48563/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f623911c-fabd-1b7f-ddfa-00002b77d565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/i","pattern":"[url:value = 'http://39.77.172.60:34449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d06a61d-11cb-de8c-79b2-0000f1b6cbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/bin.sh","pattern":"[url:value = 'http://42.232.100.206:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a50bfe6-76f3-2a86-d356-0000512f0a05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/i","pattern":"[url:value = 'http://42.232.100.206:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f21768-2138-8058-cb6a-0000e482c823","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/bin.sh","pattern":"[url:value = 'http://110.36.18.60:52528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a70d13-85cf-08f3-54ff-0000170a1044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips","pattern":"[url:value = 'http://160.191.242.92/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0384ccc6-6496-59f3-5a6c-0000ecce7024","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33104e87-8358-619a-d154-000063413a77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm7","pattern":"[url:value = 'http://160.191.242.92/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75fba481-604d-401e-3b0e-0000f4856615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d57a165-ab4e-6c61-2fcb-0000f87905a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x64","pattern":"[url:value = 'http://160.191.242.92/x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898b39c5-04d0-6843-f2ab-000017fcc69e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_m68k","pattern":"[url:value = 'http://160.191.242.92/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d9bb92-7d06-986a-7fd2-0000f2df3456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4734e723-c75c-2fe9-0d27-0000fef62cce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm5","pattern":"[url:value = 'http://160.191.242.92/pid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347a4868-e88a-3971-c3f7-00003ac2822d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ae34c6-4aa3-38ab-30b6-0000eb10d270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86","pattern":"[url:value = 'http://160.191.242.92/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39859b9e-4ea6-1e3f-63cb-00000c9cf413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm8","pattern":"[url:value = 'http://160.191.242.92/pid.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d8ece9-133e-f10a-8ed2-000028864804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.i686","pattern":"[url:value = 'http://160.191.242.92/skid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb6f522-4828-eb45-0bb1-00008476d47e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4eb","pattern":"[url:value = 'http://160.191.242.92/sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8134789d-6cd2-2ace-39e6-0000c7ef69c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm7","pattern":"[url:value = 'http://160.191.242.92/skid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d82739-bb93-562e-2438-00008d017354","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm6","pattern":"[url:value = 'http://160.191.242.92/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c4450-47d3-93fe-dfe9-000023b09da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.sh4","pattern":"[url:value = 'http://160.191.242.92/skid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff4350f-c45e-935b-b6c8-0000e7cbf6ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0660e55f-c5b9-205c-0dc6-0000fd2d4ad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c363fbf-899f-fbd7-f0c7-0000ad10433a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86_64","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191c0508-a994-b252-acde-00009313bc05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_ppc","pattern":"[url:value = 'http://160.191.242.92/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fcc911e-d42f-a192-d180-00001846fe3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4eb","pattern":"[url:value = 'http://160.191.242.92/pid.sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070b8f95-fc53-0715-628b-0000246762be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mpsl","pattern":"[url:value = 'http://160.191.242.92/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3562cef2-2e54-d275-0b11-0000b4f31891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sora.x86","pattern":"[url:value = 'http://160.191.242.92/sora.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a37bed-3169-59fd-5095-0000d6585492","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mips","pattern":"[url:value = 'http://160.191.242.92/vlxx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7a94cb-59f1-b323-49a2-0000cc71ebfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.2.112:41839/i","pattern":"[url:value = 'http://123.13.2.112:41839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e128c6-d0fa-a4bf-c51a-0000eb04d359","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/payload.xml","pattern":"[url:value = 'http://160.191.242.92/payload.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b1e016-0e28-59d5-3b94-00000ec5ea3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ipmiv2.xml","pattern":"[url:value = 'http://160.191.242.92/ipmiv2.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1c8d45-a277-deb8-19c2-0000180bb011","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ruck","pattern":"[url:value = 'http://160.191.242.92/ruck']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa82002-87cf-dba3-5d07-0000ba7b9e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/riscv64","pattern":"[url:value = 'http://160.191.242.92/riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622e6250-0f30-3999-d0df-000013d76f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/spc","pattern":"[url:value = 'http://160.191.242.92/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6127b-6b92-7a87-ed3e-0000bb96c586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.i686","pattern":"[url:value = 'http://160.191.242.92/pid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74db6151-57a1-97c5-60a9-0000f4ef50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm7","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63398dbe-1204-7434-6afb-0000ea9ef8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.amd64","pattern":"[url:value = 'http://160.191.242.92/skid.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f9304-dac6-8d97-b2bf-000052c77897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armeb","pattern":"[url:value = 'http://160.191.242.92/armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492f1f8-d655-2b01-f03c-00005c074536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm64","pattern":"[url:value = 'http://160.191.242.92/skid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644dc794-3954-c066-18e1-000082ba2942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i686","pattern":"[url:value = 'http://160.191.242.92/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa0af22-af80-a20b-9e0d-000030f6d411","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/powerpc","pattern":"[url:value = 'http://160.191.242.92/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef57d8a-01ae-becf-5520-00004f92da2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/m68k","pattern":"[url:value = 'http://160.191.242.92/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe9eb5-a4c3-b375-d4ac-0000f4f84021","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f12fad2-c5c3-1193-6517-00006791dc90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86_64","pattern":"[url:value = 'http://160.191.242.92/skid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925f738-62a8-7d0e-8671-0000cef752d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.armeb","pattern":"[url:value = 'http://160.191.242.92/pid.armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293fe3bc-2996-d514-cce8-0000fb07cfe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86_64","pattern":"[url:value = 'http://160.191.242.92/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d864e0f9-f219-eed0-e3a4-00005ac25b84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7n","pattern":"[url:value = 'http://160.191.242.92/arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93a860f-6514-ed52-40b2-000054ffe445","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b4f903-86e9-40a9-7d14-0000ff42d676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar5","pattern":"[url:value = 'http://160.191.242.92/skid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e1df07-031b-c5fc-5ae1-0000209458cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.sh4","pattern":"[url:value = 'http://160.191.242.92/vlxx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17683ca-e3d1-5c0c-7944-0000c1864968","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm","pattern":"[url:value = 'http://160.191.242.92/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7980ae-4046-bc95-02bf-000035ca642a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/t","pattern":"[url:value = 'http://160.191.242.92/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4119db-1bc6-7e9c-4ea1-0000ef7147fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489eed4c-a863-5a31-1076-0000719102a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv7l","pattern":"[url:value = 'http://160.191.242.92/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a66376-bc5b-161f-7b42-0000d56f6fe4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm6","pattern":"[url:value = 'http://160.191.242.92/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d429cb3-1c81-1886-be82-00007648e030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--559cce64-3864-ca4c-9c3f-0000176803a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.powerpc","pattern":"[url:value = 'http://160.191.242.92/skid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4128aa3f-100e-66a0-e66a-0000ba1c1bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc","pattern":"[url:value = 'http://160.191.242.92/pid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6ea607-d49b-1b23-174c-0000a36e0456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ppc","pattern":"[url:value = 'http://160.191.242.92/skid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ac6b03-37df-8c4b-1aee-0000af59a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/av.sh","pattern":"[url:value = 'http://160.191.242.92/av.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dc51c7-e448-53db-3a69-00004c533782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm6","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1583f6-3c1e-1c7d-eb50-0000384c6504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/aarch64","pattern":"[url:value = 'http://160.191.242.92/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549a4467-37a5-7b99-9012-00003d216804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips.orig","pattern":"[url:value = 'http://160.191.242.92/main_mips.orig']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3a19b1-5525-ca10-1b3e-00006de6a14c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm5","pattern":"[url:value = 'http://160.191.242.92/skid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80010c9e-778f-9852-1f12-0000d849af4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37bfebf-48e1-8093-210b-0000779c98e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/zero.mips","pattern":"[url:value = 'http://160.191.242.92/zero.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316ea865-bb74-874d-f237-000076be36ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3274e0b5-f6e1-6f5e-c071-00003ef53fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mipsel","pattern":"[url:value = 'http://160.191.242.92/skid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bbd2b7-9954-a244-f513-0000dbda60f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar6","pattern":"[url:value = 'http://160.191.242.92/ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8025acb-f047-2b09-cd7b-0000c7d6e855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm","pattern":"[url:value = 'http://160.191.242.92/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f17ea-2cb9-af6d-8f88-0000fe51a954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/k.sh","pattern":"[url:value = 'http://160.191.242.92/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd88ba46-eee5-8661-c81e-00007d28f901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/wget.sh","pattern":"[url:value = 'http://160.191.242.92/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd77b99-1f93-ed5e-5172-0000d2c821b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///mpsl","pattern":"[url:value = 'http://160.191.242.92///mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ac56dd-9e74-5ee4-a47a-000042a6f65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc64","pattern":"[url:value = 'http://160.191.242.92/pid.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f45d5ef-4291-10ed-1cb6-0000ac315609","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenkins.py","pattern":"[url:value = 'http://160.191.242.92/jenkins.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6068dc09-fd06-cd0c-5bab-000095431d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ppc","pattern":"[url:value = 'http://160.191.242.92/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b787277-26e4-557c-9354-0000e61fd91a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massload","pattern":"[url:value = 'http://160.191.242.92/massload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ab619e-623b-5454-8aab-00003e19f030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mips","pattern":"[url:value = 'http://160.191.242.92///main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6d6dd2-2d50-c012-b657-0000992bac61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0129e2b0-4a47-b757-26b6-00001fd2b2bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.aarch64","pattern":"[url:value = 'http://160.191.242.92/skid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3db699-5d9f-fc90-6f2c-0000ec438320","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm6","pattern":"[url:value = 'http://160.191.242.92/pid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf2f53b-bd3b-b30d-c93f-0000e630c9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f4f3b-a126-294e-7060-0000d6ae8248","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.m68k","pattern":"[url:value = 'http://160.191.242.92/vlxx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89422cfd-7420-c32a-a576-0000e889eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm","pattern":"[url:value = 'http://160.191.242.92/pid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660b79cd-68bb-049f-d4d8-0000042e5bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i586","pattern":"[url:value = 'http://160.191.242.92/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c913fa-0bae-b9bd-9e56-0000cf728849","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i486","pattern":"[url:value = 'http://160.191.242.92/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33623e6-c6b1-50b4-81fa-0000280a0bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6286057f-e0c3-3e4e-56d6-0000d277b8f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i386","pattern":"[url:value = 'http://160.191.242.92/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7a6d19-0dee-b675-4a72-0000870250f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar","pattern":"[url:value = 'http://160.191.242.92/skid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5107ecb0-df60-a0b0-2d13-00005d8792ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3229db90-af49-89f4-0c81-0000291b79d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.aarch64","pattern":"[url:value = 'http://160.191.242.92/vlxx.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c68c43e6-f283-e50f-4945-000066433ab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afcba2f-5c41-afda-b287-00006d46bc7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92396f32-5e9b-ba2a-9a43-00006ef98ba2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554c6221-47c0-1e4d-021e-0000e5586db2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mips","pattern":"[url:value = 'http://160.191.242.92/skid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aefeee6-15e4-9928-7bc6-0000a951c85d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar","pattern":"[url:value = 'http://160.191.242.92/ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c953c2da-c3f3-d6cf-66cb-00007fc64003","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11df17af-017a-6e43-268f-000035bd1431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm7","pattern":"[url:value = 'http://160.191.242.92/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eba982f-8b29-e632-697a-0000554b1efd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar7","pattern":"[url:value = 'http://160.191.242.92/skid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5185dc0d-5315-485d-6ab9-00004cf12b10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv6l","pattern":"[url:value = 'http://160.191.242.92/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850420c5-1cfb-ca59-a20d-0000f1fbf13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm","pattern":"[url:value = 'http://160.191.242.92/skid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddaedc7-c066-78e3-254b-0000ed40734d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86","pattern":"[url:value = 'http://160.191.242.92/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd17683-401a-160b-fd13-00009fb4dcba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm5","pattern":"[url:value = 'http://160.191.242.92/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88af32cc-6d45-43e8-a94d-0000c7dac00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm5","pattern":"[url:value = 'http://160.191.242.92/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99422cb4-86de-ea9c-feea-000097c258e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm64","pattern":"[url:value = 'http://160.191.242.92/bot_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a448105c-2470-25d0-a380-0000a315492d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_32","pattern":"[url:value = 'http://160.191.242.92/bot_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f37b9f46-d747-7c1d-7bae-0000b16f8a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_aarch64","pattern":"[url:value = 'http://160.191.242.92/main_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857ff60c-b735-c899-de8c-00007f3096d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c3d34-7287-f3e0-f6be-000092933c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40b0ec4-ba82-1d09-6ce3-00006b818f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/run_adb.sh","pattern":"[url:value = 'http://160.191.242.92/run_adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d9495c-10b8-88bc-f122-00004f640cf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mips","pattern":"[url:value = 'http://160.191.242.92/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0459f9db-c793-92bd-0d39-0000a2632cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mipsel","pattern":"[url:value = 'http://160.191.242.92/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fc9417-bb46-b254-1682-00004c390170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar7","pattern":"[url:value = 'http://160.191.242.92/pid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85a2753-c951-a8a7-b171-0000cbf7df00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bda8b9-0fce-d773-03a3-0000edf77998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar6","pattern":"[url:value = 'http://160.191.242.92/skid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7075cbda-6772-86fe-69af-00007c097e0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mpsl","pattern":"[url:value = 'http://160.191.242.92/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23bce221-849d-5c2c-970a-000063660793","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar7","pattern":"[url:value = 'http://160.191.242.92/ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196056f7-fa59-704a-8407-0000e5aebb68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.m68k","pattern":"[url:value = 'http://160.191.242.92/skid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9a9bf1-59ca-c49b-304c-0000c21f75ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86","pattern":"[url:value = 'http://160.191.242.92/pid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5007d-0cbf-7107-d76f-00005ee6986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm5","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ee75f-5a34-7892-ecfc-000013cd25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_sh4","pattern":"[url:value = 'http://160.191.242.92/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3f725c-c0a2-34f5-90b1-00003abfa419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f33b8eb-059a-868e-cfa0-0000c20d3f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dc97c9-7c31-983c-34c6-0000db6d6a23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86","pattern":"[url:value = 'http://160.191.242.92/skid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6f4281-3d5b-5adb-4426-00000bc36578","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86_64","pattern":"[url:value = 'http://160.191.242.92/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09ea4e8-59e1-6a32-45b9-00008e5b03f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mpsl","pattern":"[url:value = 'http://160.191.242.92/skid.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abb0d6e-b817-17e2-8ac6-00005f22b7b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm64","pattern":"[url:value = 'http://160.191.242.92/pid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305c412c-098e-733a-a884-00004e9e9981","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_64","pattern":"[url:value = 'http://160.191.242.92/bot_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1571bd24-5d48-aead-3499-0000bd5b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mpsl","pattern":"[url:value = 'http://160.191.242.92/vlxx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb33d50-822b-6aab-3854-0000a04ac13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.ppc","pattern":"[url:value = 'http://160.191.242.92/vlxx.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a153e0-9ed6-c1a4-17c6-00006dd30881","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7","pattern":"[url:value = 'http://160.191.242.92/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b5c7b9-503a-05a6-8c7c-00000149865c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/xparm7","pattern":"[url:value = 'http://160.191.242.92/xparm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f633480b-f2d3-9f64-a35f-00007f530ea2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm6","pattern":"[url:value = 'http://160.191.242.92/skid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b06ff38-3573-40f7-0ecb-0000a449a9ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153a3e5e-2829-1a6a-0a7f-0000159d84ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4","pattern":"[url:value = 'http://160.191.242.92/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5779a757-49a3-8f18-eafa-0000551a9e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mpsl","pattern":"[url:value = 'http://160.191.242.92///main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb2830d-09d4-2cd2-7667-0000c96fcf18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar5","pattern":"[url:value = 'http://160.191.242.92/ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58851973-60e8-bd04-81b6-0000a4134d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/adbload","pattern":"[url:value = 'http://160.191.242.92/adbload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542e732d-f023-2520-0fe3-00001c27b7b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenload","pattern":"[url:value = 'http://160.191.242.92/jenload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f1184f-b1f6-b151-da92-0000c711d579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/dvrk","pattern":"[url:value = 'http://160.191.242.92/dvrk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46445693-20e4-4557-ac5f-000096733c1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.156:47216/i","pattern":"[url:value = 'http://110.36.13.156:47216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b071edb8-5f0f-6ee7-857b-0000f3e926bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/bin.sh","pattern":"[url:value = 'http://112.225.177.252:53050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027172f5-3cbd-41b1-a0dc-00007d72ae49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/i","pattern":"[url:value = 'http://112.225.177.252:53050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f465040-99ff-a458-ef63-0000a1e87180","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/activemq","pattern":"[url:value = 'http://160.191.242.92/activemq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bdd882-1e38-26b5-807e-0000eaf60ace","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/bin.sh","pattern":"[url:value = 'http://117.26.226.42:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeba7a0b-0dd5-6744-07a9-00000647610f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/bin.sh","pattern":"[url:value = 'http://105.186.82.28:41113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de5aed3-4f00-f730-feb8-00009b5d492a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.141/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.141/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a364ea07-2951-288d-ea47-00001f77edaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massloader_dvr.new","pattern":"[url:value = 'http://160.191.242.92/massloader_dvr.new']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52314986-8872-06ee-f013-000061abd6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/bin.sh","pattern":"[url:value = 'http://175.43.119.226:38433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd7ad15-d53c-6020-30e9-0000ed85a11b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.137.203:37078/bin.sh","pattern":"[url:value = 'http://182.121.137.203:37078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408873a0-d143-672d-6d6f-0000ca7f39a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/cnc_new_x64","pattern":"[url:value = 'http://160.191.242.92/cnc_new_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ff2082-343f-d497-4577-0000ae414189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenbrute","pattern":"[url:value = 'http://160.191.242.92/jenbrute']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d460d90f-479d-9b6b-c192-0000e2621d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/bin.sh","pattern":"[url:value = 'http://27.209.155.133:42828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16041bb1-17bc-5980-26ed-00009eb1de1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb6f5f-38ee-ff96-dfae-00007d4540bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f58fcb7-96a2-9106-9a5b-0000e9deda63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/runme.sh","pattern":"[url:value = 'http://46.151.182.200/runme.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7210a6cc-cc59-b63d-b5e8-0000892921f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f76385-d6b5-7434-598a-00007e81c3ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://asegurar2026.duckdns.org/sostener2.vbs","pattern":"[url:value = 'http://asegurar2026.duckdns.org/sostener2.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff62abc-037f-6996-4860-00000387d924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/Exodus.sh","pattern":"[url:value = 'http://94.154.43.26:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7924de12-fe1a-bf23-3db5-0000c86c3e89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://141.11.100.247/fktn62.sh","pattern":"[url:value = 'http://141.11.100.247/fktn62.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5327886-4a1e-9548-16a8-00003eff8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip","pattern":"[url:value = 'https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e93dfc-5263-1caf-e4ff-0000fb96dd91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db160b35-5f34-ff18-d4ce-0000c1f60e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/i","pattern":"[url:value = 'http://175.43.119.226:38433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9cbbe10-c5b8-b489-7611-00009ea07e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/i","pattern":"[url:value = 'http://125.45.148.93:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c23e94f-a466-7ca1-9ab8-0000a26bb6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/i","pattern":"[url:value = 'http://105.186.82.28:41113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93bd5623-41a6-74c8-1a10-0000974c8867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.112.68:46964/i","pattern":"[url:value = 'http://182.126.112.68:46964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd4bc331-f8c7-24c2-c833-0000d006d661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/i","pattern":"[url:value = 'http://110.36.18.60:52528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5051b3e7-5af5-9058-f6ed-00008b5f1fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/i","pattern":"[url:value = 'http://27.209.155.133:42828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dad79-1210-6cf3-2d9f-0000ec979841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/i","pattern":"[url:value = 'http://27.193.35.180:45367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2840d7ec-24fb-de20-4269-0000ec2b7e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/bin.sh","pattern":"[url:value = 'http://42.224.217.218:36543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65afd37f-ef6e-bf43-8ff2-000047a74203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/i","pattern":"[url:value = 'http://125.44.43.60:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5d40c8-3409-0df6-b1a9-00008e69e027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm5","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ac160e-2bf9-8430-7b32-00003d1032c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ce5ed","pattern":"[url:value = 'http://5.182.210.174/9ce5ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f7fd64-c08f-ca35-8851-00003963de94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f97e6f","pattern":"[url:value = 'http://5.182.210.174/f97e6f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0d5e52-3ac8-690a-e907-0000c1c7b36a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e6855","pattern":"[url:value = 'http://5.182.210.174/6e6855']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e7d967-2a08-4747-1172-0000d77a9190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2965f","pattern":"[url:value = 'http://5.182.210.174/d2965f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412713c-b716-f9c6-ddc4-00001c9a60d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78dbc7","pattern":"[url:value = 'http://5.182.210.174/78dbc7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34b9737-6eab-f9d5-0ac1-00000a5c32ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/10d086","pattern":"[url:value = 'http://5.182.210.174/10d086']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b87dd1-79c8-7983-2c16-0000271626da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0df469","pattern":"[url:value = 'http://5.182.210.174/0df469']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4df4dd-9a51-8131-37f3-0000099afa32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef75b2","pattern":"[url:value = 'http://5.182.210.174/ef75b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed33892-62f9-5f7b-90a0-000002a4162b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f6d64f","pattern":"[url:value = 'http://5.182.210.174/f6d64f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f563229d-b418-a769-797c-000072b4183a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea7693","pattern":"[url:value = 'http://5.182.210.174/ea7693']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d21f4-0f37-b3dd-3080-0000b495f7e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ZTMe","pattern":"[url:value = 'http://129.121.110.105/ZTMe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d723904-f65e-3551-4426-000043f070d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f98144","pattern":"[url:value = 'http://5.182.210.174/f98144']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6fc3d-dee4-1e84-36cd-000012cbfa02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/af2ec4","pattern":"[url:value = 'http://5.182.210.174/af2ec4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26679570-ae0e-0523-fcee-00007f67a77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e4138","pattern":"[url:value = 'http://5.182.210.174/0e4138']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5964da3a-e203-c6a1-bba3-0000ec82ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df5d68","pattern":"[url:value = 'http://5.182.210.174/df5d68']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a56e5e-5d34-1f90-9e52-0000cf96579a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vJB","pattern":"[url:value = 'http://129.121.110.105/vJB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c0fa24-a3f1-5013-ab89-0000be056004","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VOgA","pattern":"[url:value = 'http://129.121.110.105/VOgA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf03943-fb25-c02e-39bb-00003593098d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d97f08","pattern":"[url:value = 'http://5.182.210.174/d97f08']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b00099-6978-ade6-1c94-0000cdd575e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3c14b4","pattern":"[url:value = 'http://5.182.210.174/3c14b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4616dd8-f369-c570-d086-00009d0a65b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/90e80a","pattern":"[url:value = 'http://5.182.210.174/90e80a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a9a90a-83b2-fb1a-a8c6-0000292edc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/660bc9","pattern":"[url:value = 'http://5.182.210.174/660bc9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29041e05-2166-5d9f-2720-000021917caa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/839ec9","pattern":"[url:value = 'http://5.182.210.174/839ec9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62832652-04aa-9a12-e726-00002c21eeac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5d360","pattern":"[url:value = 'http://5.182.210.174/a5d360']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c5a9d1-52ca-60c5-b030-0000ecf62b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6b72d3","pattern":"[url:value = 'http://5.182.210.174/6b72d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd54f54-cbf9-2e62-b10e-00001e9bb6ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2bd33f","pattern":"[url:value = 'http://5.182.210.174/2bd33f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03df392-46c8-5f07-129b-00006d18d78f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/42736b","pattern":"[url:value = 'http://5.182.210.174/42736b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4fa57e-c542-7fa2-9e24-00009f0a14a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/51f300","pattern":"[url:value = 'http://5.182.210.174/51f300']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359231c6-5314-3dc5-1366-0000b9085ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bed3aa","pattern":"[url:value = 'http://5.182.210.174/bed3aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79415c70-264f-4331-3e7f-0000b7524ed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/db7b9c","pattern":"[url:value = 'http://5.182.210.174/db7b9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfadac9c-c5ff-c75a-fc0d-0000aaaa2845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d4271","pattern":"[url:value = 'http://5.182.210.174/1d4271']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcce745-792b-e208-362e-000001cae15e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc89e2","pattern":"[url:value = 'http://5.182.210.174/cc89e2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfd9ad4-21f3-c33d-2941-0000365434af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/021219","pattern":"[url:value = 'http://5.182.210.174/021219']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2951d848-f74c-f771-7a62-0000df72b78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/824d82","pattern":"[url:value = 'http://5.182.210.174/824d82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56599372-837b-5e50-a451-0000ebd8c94f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78887f","pattern":"[url:value = 'http://5.182.210.174/78887f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa043dd-a396-f9b5-d379-00007ca55c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9c504a","pattern":"[url:value = 'http://5.182.210.174/9c504a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--566b6290-0440-0e65-857b-000084ce4cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9f15f6","pattern":"[url:value = 'http://5.182.210.174/9f15f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348f4cc-1821-7b59-49e5-00006414c7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/JPO","pattern":"[url:value = 'http://129.121.110.105/JPO']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73505b0-33d9-4e6e-7033-00001aec8b2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/57980e","pattern":"[url:value = 'http://5.182.210.174/57980e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1173dffe-ec17-6b2e-fd57-00008480e233","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/69e697","pattern":"[url:value = 'http://5.182.210.174/69e697']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7410f74b-198c-74ac-e564-0000cef340e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a82d92","pattern":"[url:value = 'http://5.182.210.174/a82d92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc906ff7-2822-4ba3-e4cd-00005697c41b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0aed7d","pattern":"[url:value = 'http://5.182.210.174/0aed7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289134f1-201d-a73f-94d0-00007c520c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86521e","pattern":"[url:value = 'http://5.182.210.174/86521e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81353439-3fd2-a952-49d8-00003255ace4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfeb03","pattern":"[url:value = 'http://5.182.210.174/bfeb03']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b416de8c-f3dc-87ba-2753-0000f736fa3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fcfd06","pattern":"[url:value = 'http://5.182.210.174/fcfd06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a7fed8-63c7-ee2b-f57e-0000b561dbf8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/sCy","pattern":"[url:value = 'http://129.121.110.105/sCy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976471-a9ee-e39e-003e-0000cebfef2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/41cb7b","pattern":"[url:value = 'http://5.182.210.174/41cb7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb046e1-a096-8f9c-e3e0-00003114a4dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e67edd","pattern":"[url:value = 'http://5.182.210.174/e67edd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba3cb8c-02aa-7208-42da-00007b885b66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05ac9f","pattern":"[url:value = 'http://5.182.210.174/05ac9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894aca1a-0dd9-96b8-1256-000042dbf4cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f76f77","pattern":"[url:value = 'http://5.182.210.174/f76f77']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4101cf-388a-266f-92cc-00007645d45e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2025","pattern":"[url:value = 'http://5.182.210.174/7b2025']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af01015-e6ce-2df8-b843-000019e4c442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7e17e","pattern":"[url:value = 'http://5.182.210.174/e7e17e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfba318e-152a-a020-a3e1-0000f2342ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3603","pattern":"[url:value = 'http://5.182.210.174/cf3603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c67a53f-73a5-3a7c-3bc9-0000dbe75b58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3aa8b4","pattern":"[url:value = 'http://5.182.210.174/3aa8b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92addbe3-d04c-e48b-bd10-00009579e844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/spc","pattern":"[url:value = 'http://43.98.174.233/release/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433e02f9-1362-7bc8-3e4a-0000bd34729b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm6","pattern":"[url:value = 'http://43.98.174.233/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543d97b7-f65f-d22e-8309-0000520ffda3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/DjEq","pattern":"[url:value = 'http://129.121.110.105/DjEq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6265b7-acee-ad3f-4de0-00008f5132c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/1htR","pattern":"[url:value = 'http://129.121.110.105/1htR']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6d1c05-e780-7251-7496-000027c9c751","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/m68k","pattern":"[url:value = 'http://43.98.174.233/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f2db5-650a-1c7c-af20-00006acebde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/98oE","pattern":"[url:value = 'http://129.121.110.105/98oE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420e8fce-2856-fb20-2c84-000034e45725","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2EUE","pattern":"[url:value = 'http://129.121.110.105/2EUE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90eb65ba-4000-c3d6-19f1-000013ed9aea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/ppc","pattern":"[url:value = 'http://43.98.174.233/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af91646e-35fa-d594-9f31-000030a6ae5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86_64","pattern":"[url:value = 'http://43.98.174.233/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da375343-88dc-ab33-ba2c-0000af81dd75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm5","pattern":"[url:value = 'http://43.98.174.233/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04128d3-019c-6221-48aa-0000273f118b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mips","pattern":"[url:value = 'http://43.98.174.233/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3439326f-49b3-3c1e-ef0d-0000058815fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm7","pattern":"[url:value = 'http://43.98.174.233/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5593ee1a-48f3-7a22-7afd-00004c3c7fc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mpsl","pattern":"[url:value = 'http://43.98.174.233/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5881e378-7fe4-ed01-4c77-000041786f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm","pattern":"[url:value = 'http://43.98.174.233/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595474-d346-dfe7-5a4c-00006beef49f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86","pattern":"[url:value = 'http://43.98.174.233/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fee197-bda3-c93f-be1e-0000114af685","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.4.69:45512/i","pattern":"[url:value = 'http://110.37.4.69:45512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3789505d-e03c-b1b0-3dcf-0000becd9eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/cCf","pattern":"[url:value = 'http://129.121.110.105/cCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0485d5b-c46d-adfd-787c-0000e38d6e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/86D","pattern":"[url:value = 'http://129.121.110.105/86D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a706ed47-1e19-9db8-c5ba-00008310f6d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1c7216","pattern":"[url:value = 'http://5.182.210.174/1c7216']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4daf6d-382a-58b5-9b04-0000958b8018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/OLE5","pattern":"[url:value = 'http://129.121.110.105/OLE5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63632005-7cbb-4768-36fc-0000b3829366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b08f0c","pattern":"[url:value = 'http://5.182.210.174/b08f0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7aa58e-fd5a-41e8-25c3-00007c7da301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c3efb4","pattern":"[url:value = 'http://5.182.210.174/c3efb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ca4338-1cf6-fb3a-238a-00007eebc6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/aWG","pattern":"[url:value = 'http://129.121.110.105/aWG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfbad18-ed0b-1a5c-7a05-0000d7855e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/072508","pattern":"[url:value = 'http://5.182.210.174/072508']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28e88bd-ba12-8f96-0cd0-0000c0aa943b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d2891","pattern":"[url:value = 'http://5.182.210.174/0d2891']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f66748-4b24-af30-427b-0000f49d33d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0089b9","pattern":"[url:value = 'http://5.182.210.174/0089b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c59c6a-78c0-f3df-377a-000087ccf8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5f60c7","pattern":"[url:value = 'http://5.182.210.174/5f60c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e1ccb-f441-6b19-7116-000068434c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cd6ef","pattern":"[url:value = 'http://5.182.210.174/6cd6ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af893644-e3de-e20a-7004-00009e9dcaec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50fc1e","pattern":"[url:value = 'http://5.182.210.174/50fc1e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a66c8-5e4a-89cf-95b6-0000ce64e69d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/N2J2","pattern":"[url:value = 'http://129.121.114.124/N2J2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca0f290-8375-6997-0410-0000f939dd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d236bf","pattern":"[url:value = 'http://5.182.210.174/d236bf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b04f85a-e2be-f964-6422-00004e55413f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/MyS","pattern":"[url:value = 'http://129.121.114.124/MyS']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a1f071-e3a9-55c9-4cb0-0000142835f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/tbW","pattern":"[url:value = 'http://129.121.110.105/tbW']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f4937f-7316-6a05-12f5-00004b6785ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/71431a","pattern":"[url:value = 'http://5.182.210.174/71431a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4df1fd-f858-c5be-1365-00004ca04851","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/8ZG","pattern":"[url:value = 'http://129.121.114.124/8ZG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91222a0b-9d97-61fb-4c93-000042282712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dS74","pattern":"[url:value = 'http://129.121.114.124/dS74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baac8dcb-cfc1-a9a4-e334-000038c13570","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c70dba","pattern":"[url:value = 'http://5.182.210.174/c70dba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb4ce61-c3fd-f058-9dc5-0000241669e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/de3259","pattern":"[url:value = 'http://5.182.210.174/de3259']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d818f8eb-2b8d-3c87-6d40-00009ec889d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/jdDj","pattern":"[url:value = 'http://129.121.114.124/jdDj']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba46951-6147-188e-8ca6-0000fc8cb61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VFgi","pattern":"[url:value = 'http://129.121.110.105/VFgi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e41dac5-d6c1-411f-b095-0000191e4d98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/gEK","pattern":"[url:value = 'http://129.121.114.124/gEK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c2b695-6f0d-b1e2-1088-0000c85b9595","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e216c","pattern":"[url:value = 'http://5.182.210.174/0e216c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d7558-e910-7c76-4577-0000ccfc8a9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2adcae","pattern":"[url:value = 'http://5.182.210.174/2adcae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a694c277-2f04-65a3-5aa4-0000ab66d94c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/191276","pattern":"[url:value = 'http://5.182.210.174/191276']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33835fe-6c94-2f1b-8ce5-0000c11f61ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e47c56","pattern":"[url:value = 'http://5.182.210.174/e47c56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9f65d9-1dfe-0463-d082-00000e145a0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c4b84","pattern":"[url:value = 'http://5.182.210.174/0c4b84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625e9390-55ba-c120-f161-0000dfda5816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35079b","pattern":"[url:value = 'http://5.182.210.174/35079b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73938623-8701-33f9-d7aa-0000caa24057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.143/bot","pattern":"[url:value = 'http://217.60.195.143/bot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f4622-fefd-4b72-d38a-0000b49143bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9fdeb7","pattern":"[url:value = 'http://5.182.210.174/9fdeb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b70fa70-b206-e0e8-da3e-00001ed1558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e6c81e","pattern":"[url:value = 'http://5.182.210.174/e6c81e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44057ae-0d93-434c-a622-0000a4b6bf33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/932a2a","pattern":"[url:value = 'http://5.182.210.174/932a2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0a30b6-769b-ee2f-7df8-00000a3618ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5VZa","pattern":"[url:value = 'http://129.121.114.124/5VZa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a7d0e2-6c17-2226-b205-0000979ab247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dnCf","pattern":"[url:value = 'http://129.121.114.124/dnCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44824e15-93d2-e176-df3b-000083d7a4f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16268e","pattern":"[url:value = 'http://5.182.210.174/16268e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4060af4a-d392-c876-7486-0000ed568c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dMX","pattern":"[url:value = 'http://129.121.114.124/dMX']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ca1064-470f-43e6-e633-00008adb1f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/cZg","pattern":"[url:value = 'http://129.121.114.124/cZg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384aa6a-3036-78fa-da00-00000f0b1891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878f49","pattern":"[url:value = 'http://5.182.210.174/878f49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bed60f-2159-9b65-65a6-00000491fec1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/i","pattern":"[url:value = 'http://42.224.217.218:36543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54cefe3-577f-a4b9-c2d0-0000f95ec96a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/bin.sh","pattern":"[url:value = 'http://157.66.146.183:43544/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca72186-3c98-0f4f-7b2b-0000d5e30158","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.111.210.192:51471/i","pattern":"[url:value = 'http://125.111.210.192:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b12e8f-8c4e-5049-58ba-0000a97e9336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/bin.sh","pattern":"[url:value = 'http://42.230.35.149:47141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d857cf-8bd2-9239-7fd3-0000137705d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt","pattern":"[url:value = 'https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c1bfca-dffc-9ab6-2913-0000e7701661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/i","pattern":"[url:value = 'http://196.190.224.62:43470/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e86aaf9-cc54-09cb-7660-00001e507ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/bRci","pattern":"[url:value = 'http://129.121.114.124/bRci']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4894cd-0d8a-c8d1-630e-0000002bc69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/485150","pattern":"[url:value = 'http://5.182.210.174/485150']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d881038b-c5b5-d23e-cb83-0000a8845162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7866d1","pattern":"[url:value = 'http://5.182.210.174/7866d1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e194d0f8-8257-385e-a623-000039fbf565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3020e1","pattern":"[url:value = 'http://5.182.210.174/3020e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c130dec0-054f-fb75-8f49-00005cbb0b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50435a","pattern":"[url:value = 'http://5.182.210.174/50435a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a4e46d-8668-f9c1-7cbb-00005fd04ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/q0V","pattern":"[url:value = 'http://129.121.114.124/q0V']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899ef816-9733-ca4b-5807-0000270f4f13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/9WH","pattern":"[url:value = 'http://129.121.114.124/9WH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4fb203-e182-7383-0dda-0000c6a06b20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/748a90","pattern":"[url:value = 'http://5.182.210.174/748a90']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de754457-e052-06c8-c4d7-000029ff72f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/k7M","pattern":"[url:value = 'http://129.121.110.105/k7M']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed64ae95-dcd7-fab4-ace0-000075f50b7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/aeecec","pattern":"[url:value = 'http://5.182.210.174/aeecec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a2b23f-081d-7cb0-1bb4-0000356ae9ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/3tp","pattern":"[url:value = 'http://129.121.114.124/3tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a2e0bd-3643-aa3a-2d0e-00005f5619e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/seb3","pattern":"[url:value = 'http://129.121.114.124/seb3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab18c10b-15ed-02e3-4b72-000039aed4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/NtB","pattern":"[url:value = 'http://129.121.110.105/NtB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61652ec-4d95-1897-165b-000028d7e65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2af6fb","pattern":"[url:value = 'http://5.182.210.174/2af6fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dca2c82-4367-c13f-24ab-00005447ca5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/59a197","pattern":"[url:value = 'http://5.182.210.174/59a197']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736100c3-72fe-38fc-6562-00005d2a3c0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/29d455","pattern":"[url:value = 'http://5.182.210.174/29d455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3cc772-bc59-6239-ea55-000008d7c461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d4a3c0","pattern":"[url:value = 'http://5.182.210.174/d4a3c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dedb5-7bc7-92e6-2cfe-0000ef30e972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cdb475","pattern":"[url:value = 'http://5.182.210.174/cdb475']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71f1b55-4073-b1ed-5a8a-0000ba3f6f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07038c","pattern":"[url:value = 'http://5.182.210.174/07038c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd617f6-5a7d-3fb5-fb2a-00002f0cb934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5da97","pattern":"[url:value = 'http://5.182.210.174/e5da97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f011649-33ec-3557-e63e-0000e0a2762f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VHo","pattern":"[url:value = 'http://129.121.110.105/VHo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22add7be-67e7-77ea-42d6-00005da81a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/nf1","pattern":"[url:value = 'http://129.121.110.105/nf1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066dd189-a9c6-4283-a771-0000b1b28c1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ab4501","pattern":"[url:value = 'http://5.182.210.174/ab4501']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aaa7f06-cd99-1d67-b8a1-00006e5f16c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d687aa","pattern":"[url:value = 'http://5.182.210.174/d687aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cd680b-a6b2-02f7-9397-0000b0d2f534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ytEr","pattern":"[url:value = 'http://129.121.110.105/ytEr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a508de48-667f-afa0-dbad-00009b9ff9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e89cd9","pattern":"[url:value = 'http://5.182.210.174/e89cd9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b29e87-0136-7383-6b97-0000daa13db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a05a88","pattern":"[url:value = 'http://5.182.210.174/a05a88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd285d4e-f473-a618-a4b8-0000b4d26e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0cda73","pattern":"[url:value = 'http://5.182.210.174/0cda73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a280c6b-f5b5-1b06-4c2d-000029f486c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8fedf4","pattern":"[url:value = 'http://5.182.210.174/8fedf4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ab7b19-ac10-d1dc-6418-00006a4e0789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6be5c4","pattern":"[url:value = 'http://5.182.210.174/6be5c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff615bc-043b-782f-deca-00005b59f318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/688c63","pattern":"[url:value = 'http://5.182.210.174/688c63']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ec9164-a278-d6a0-5f7d-00007a4e330e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff9728","pattern":"[url:value = 'http://5.182.210.174/ff9728']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f73175-f3bc-b2e4-6c75-000043c88fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b9d62","pattern":"[url:value = 'http://5.182.210.174/9b9d62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c002b-d22c-ef29-4652-0000846ac1af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c1687","pattern":"[url:value = 'http://5.182.210.174/4c1687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff7ed0f-d584-470a-83d7-00003723e892","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.aarch64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85512f1-1309-65c9-1d04-000023858959","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv6l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6a61a4-f94b-7515-c010-0000fb86620d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mips","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb78f8d4-9d2f-59fb-7252-0000fc4d4a32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sh4","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a637073-e0dd-7f38-4a30-00005945da39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv4l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21831b0f-004e-32d8-413b-000022ad1bb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sparc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3465572-f75b-a125-7035-0000fb70b4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.m68k","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7a3b02-7837-377c-c3a6-00007b90e6b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.i486","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed893727-144b-7c48-f141-0000cd178e96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mipsel","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f8b146-e44c-5c11-d60e-0000ced9519a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.arc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b42c1db-7e37-aa95-49b5-00003f995987","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.powerpc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93784132-43a7-5992-a241-00006425f389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv5l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ef2d40-f173-07d4-9a5d-000094736da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.x86_64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14e23b0-c702-efcc-3a99-00001ee5a0e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv7l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349caca9-0629-6fb3-5dfb-0000d9d40fff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/bin.sh","pattern":"[url:value = 'http://42.224.67.199:54598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37a87be-a901-7c53-97d7-0000ffa400b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598188e9-cebe-7691-85e2-00003ba00f2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6ef709-5633-ae2e-089c-00000a5045df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/c.sh","pattern":"[url:value = 'http://43.98.174.233/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697a3ad5-c342-feff-d367-0000ea4df447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/i","pattern":"[url:value = 'http://157.66.146.183:43544/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb53534-3c01-6bb6-9bf0-0000ce2e8dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/i","pattern":"[url:value = 'http://42.224.67.199:54598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60ef0a9-5734-cde8-354a-0000d1dbef2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/bin.sh","pattern":"[url:value = 'http://178.205.38.0:44205/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d226c26-e5d6-738c-3589-0000d49e1a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/i","pattern":"[url:value = 'http://222.141.61.27:55632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce07e70c-df9b-f09c-6479-000072374c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/i","pattern":"[url:value = 'http://210.208.111.220:36372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48dbf48-d6f7-55de-2328-00007aabd498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/i","pattern":"[url:value = 'http://115.56.144.249:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be91106f-a5a0-4e61-f7a4-00007a37788e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/bin.sh","pattern":"[url:value = 'http://27.24.12.180:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c69972-0f25-5ef5-bdd6-00007187afce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/i","pattern":"[url:value = 'http://210.208.111.100:38107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22de53d8-43db-7fd9-6c3b-00008711d040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/i","pattern":"[url:value = 'http://178.205.38.0:44205/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6bcdd3-f255-5b51-236d-0000df8ddfde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/bin.sh","pattern":"[url:value = 'http://123.12.234.37:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d18451d-4c34-2224-6f2e-00007eea56d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/i","pattern":"[url:value = 'http://182.127.103.153:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ba9e73-4130-947c-8163-000066b76e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/i","pattern":"[url:value = 'http://27.24.12.180:50663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5a705e-17bf-afd0-2f6c-000036d58742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3e993d-5f96-eab4-0f38-0000b9271f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mipsel","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b070f8e-5f26-f159-b0ea-00000621fa03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/m68k","pattern":"[url:value = 'http://94.154.43.26:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b3b58-1cca-9992-34af-000006d72cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mips","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5e9b4-c443-ce5f-39d3-00004f247dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/ppc","pattern":"[url:value = 'http://94.154.43.26:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4541172-f6b5-9e79-a498-00009cdc4fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm6","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35321e4-810f-25fb-7eb8-0000246028ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm7","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37870be3-8bbd-40b4-00f9-0000cffae428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/sh4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f67d87a-2a35-3e05-e8eb-0000372713ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x86","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfec5a8-7c51-f27d-3577-0000cf95b5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x32","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7229429-e0a4-f91f-bd9c-000003a736dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/i","pattern":"[url:value = 'http://123.5.150.18:40732/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dffabbd-7cdc-dabc-6217-00005901a2cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/bin.sh","pattern":"[url:value = 'http://106.40.240.24:35127/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14728ddf-ae89-1497-e328-00004285c1a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/bin.sh","pattern":"[url:value = 'http://110.36.26.164:39914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dfb431-45e9-b272-db67-0000471a6ee6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/gchLdNMan179.bin","pattern":"[url:value = 'http://185.29.9.108/gchLdNMan179.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03ddcdd-d263-9d42-692c-000004c2256f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Virginalling.asi","pattern":"[url:value = 'http://185.29.9.108/Virginalling.asi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9a7d27-47c9-2c23-9ab1-0000433f6886","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/bin.sh","pattern":"[url:value = 'http://42.228.39.67:45035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1b391b-7ed4-596f-0871-000060e44d33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/bin.sh","pattern":"[url:value = 'http://221.15.218.63:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a16103-6683-cea9-7718-00002b07327c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/775af1","pattern":"[url:value = 'http://5.182.210.174/775af1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64663856-3863-75cc-4665-00002f096f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1eb5ef","pattern":"[url:value = 'http://5.182.210.174/1eb5ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6945bf3f-9ab9-fe58-5a3f-0000beaae002","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e0758e","pattern":"[url:value = 'http://5.182.210.174/e0758e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1f5dca-7cac-e580-617f-0000ea537838","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f48b45","pattern":"[url:value = 'http://5.182.210.174/f48b45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a81037-6b72-4fee-27cb-0000479d8f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3ee62b","pattern":"[url:value = 'http://5.182.210.174/3ee62b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3974aaf9-6e78-7549-ae77-00004de3ec8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b62738","pattern":"[url:value = 'http://5.182.210.174/b62738']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8336c101-e17a-c6f1-e56e-0000e8ef5c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/12cd43","pattern":"[url:value = 'http://5.182.210.174/12cd43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eae43cc-766a-a60a-fc24-000086f9b8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ed422a","pattern":"[url:value = 'http://5.182.210.174/ed422a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478acac3-0427-e550-fe91-00005be7380a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d5aa8","pattern":"[url:value = 'http://5.182.210.174/0d5aa8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac3960d-7d01-fee3-b16d-0000d9d868d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a34888","pattern":"[url:value = 'http://5.182.210.174/a34888']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4e8997-997a-6f05-7626-0000770fa493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c55677","pattern":"[url:value = 'http://5.182.210.174/c55677']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013ad69b-8232-a7e4-69f5-0000145ea995","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dc7ecc","pattern":"[url:value = 'http://5.182.210.174/dc7ecc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5e924d-a193-ffff-3f55-00004390cf6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.103.43:39953/i","pattern":"[url:value = 'http://125.43.103.43:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df257779-6745-b944-1380-0000842c2dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/i","pattern":"[url:value = 'http://42.228.39.67:45035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6932e95f-f617-91f1-4cd9-0000d4fd356f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/i","pattern":"[url:value = 'http://110.36.26.164:39914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef8ffa8-e079-ec72-d096-0000035fcea4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sysupdate.online/tools/grab.cmd","pattern":"[url:value = 'https://sysupdate.online/tools/grab.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8050e46e-3c98-2d8c-596d-0000e746c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/bin.sh","pattern":"[url:value = 'http://125.46.213.70:47197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a42c4e0-773f-06d1-6cc9-00006ad0a762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/i","pattern":"[url:value = 'http://39.74.53.25:55617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00743a0f-1650-be67-a6e7-00008deb69cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.93.217:46445/bin.sh","pattern":"[url:value = 'http://110.36.93.217:46445/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02dba92-9445-dbd7-a314-000051143387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/i","pattern":"[url:value = 'http://46.236.65.43:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4661af0-2e05-56d3-358e-0000554e087c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/bin.sh","pattern":"[url:value = 'http://115.54.132.26:37475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a54eb14-1a88-c5dc-f91c-00003ed5f1e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/i","pattern":"[url:value = 'http://210.208.104.156:32771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac54a4e-f3ea-c438-e253-00006fea74be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.114.184:58866/i","pattern":"[url:value = 'http://182.121.114.184:58866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c03dcf0-0fbe-4030-c3b6-0000f536edcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/bin.sh","pattern":"[url:value = 'http://222.141.61.27:55632/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949df10a-2219-0222-e9e7-00007af8ffe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/bin.sh","pattern":"[url:value = 'http://110.37.43.119:55539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e009b6-dc2c-6a06-dfef-0000446d9e14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/i","pattern":"[url:value = 'http://222.182.123.61:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1afae98-dc76-a54e-ff82-0000719b8319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/i","pattern":"[url:value = 'http://182.123.40.234:41791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f6a38b-5215-202d-9b70-0000c8e2098b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.43.5:55742/i","pattern":"[url:value = 'http://61.54.43.5:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8e08f2-d3e9-f2c2-80a3-000080efc631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://83.68.249.16:45432/i","pattern":"[url:value = 'http://83.68.249.16:45432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8663a82e-939d-f369-8a41-000074c028c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/i","pattern":"[url:value = 'http://93.157.253.209:37860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea300153-3d3e-af3f-49a3-0000a54ed440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/bin.sh","pattern":"[url:value = 'http://113.231.229.97:60941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f0d05c-1535-b58e-276a-0000ad55a53e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/bin.sh","pattern":"[url:value = 'http://93.157.253.209:37860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88acd1eb-2e87-1874-aa9b-0000168261fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/bin.sh","pattern":"[url:value = 'http://175.147.220.91:36766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d30774c-58a9-7d33-ba77-0000cb51ee9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/i","pattern":"[url:value = 'http://1.20.91.236:53593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69541cbe-8d09-1b5f-edeb-0000b1c75e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/bin.sh","pattern":"[url:value = 'http://123.190.20.88:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9b37da-29e5-d794-2a8f-000083b21f8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/i","pattern":"[url:value = 'http://175.147.220.91:36766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d6fcdd-4894-e5d4-af27-0000a69e3a95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/i","pattern":"[url:value = 'http://42.235.1.153:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2036015b-74d0-a4df-87fd-0000423e2007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/bin.sh","pattern":"[url:value = 'http://113.58.131.62:38469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219480e9-08c6-1b6f-0488-00009ea461b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/i","pattern":"[url:value = 'http://210.208.116.107:43623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d5a15e-a295-0959-d41e-0000d3f1ed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.189.169:34303/i","pattern":"[url:value = 'http://182.115.189.169:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80719cb-b165-4ee7-6a0b-00006ce8006c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/bin.sh","pattern":"[url:value = 'http://59.58.42.82:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb191c0-75cd-649e-ba74-0000b1e5eb51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/bin.sh","pattern":"[url:value = 'http://110.37.116.127:38782/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9778a7-9824-5b58-e49a-0000a1ccfb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/bin.sh","pattern":"[url:value = 'http://39.77.172.60:34449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8545b5fe-abb0-c854-c4a8-0000d428f413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.14:38206/i","pattern":"[url:value = 'http://115.55.130.14:38206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692ced19-830e-f885-b78e-00003e893c7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/i","pattern":"[url:value = 'http://221.15.218.63:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9d25b5-586f-ab9b-b2c6-000051ae4655","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/i","pattern":"[url:value = 'http://37.78.176.5:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9882861d-4858-d5aa-7423-00008ee7a8d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/bin.sh","pattern":"[url:value = 'http://115.56.144.249:44378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d9e5ed-1509-96f1-74e3-0000894a6bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/bin.sh","pattern":"[url:value = 'http://61.52.33.100:54465/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69837c9d-36c5-ff95-2723-0000f6868a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/bin.sh","pattern":"[url:value = 'http://115.48.160.237:33370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc27d8b-1f5f-b15a-42c3-0000f6ed15e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/bin.sh","pattern":"[url:value = 'http://42.86.136.138:39726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5df945-6a34-952b-0adb-000052837db5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/i","pattern":"[url:value = 'http://183.23.139.207:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e44d03-e032-66e0-04b3-00001480ec1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.14:60098/i","pattern":"[url:value = 'http://203.101.187.14:60098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bdc712-13d6-ead9-a6a5-0000dabfbc91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/bin.sh","pattern":"[url:value = 'http://222.182.123.61:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01fbe81-e2bc-6953-621f-0000e3cfba7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/bin.sh","pattern":"[url:value = 'http://210.208.111.74:36898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37761186-a146-0c39-3a97-0000fb71d5b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/i","pattern":"[url:value = 'http://182.115.68.225:51187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb14c5cc-e3c7-694a-f00b-0000c094dd07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/i","pattern":"[url:value = 'http://42.224.13.254:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84703c3c-950d-59fd-014c-0000faf1511d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/i","pattern":"[url:value = 'http://175.147.159.41:36190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be5faa-d886-2bf7-46e1-0000316342f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.87/rondo","pattern":"[url:value = 'http://194.26.192.87/rondo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e303ea91-4a7e-1f7f-6dbf-0000353fdd56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.182:55007/i","pattern":"[url:value = 'http://110.36.72.182:55007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b6808-61b8-8285-27ca-0000c0932cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.12.61:55017/i","pattern":"[url:value = 'http://110.36.12.61:55017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a04ccc66-3f5f-532e-ffc4-0000a0096765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/bin.sh","pattern":"[url:value = 'http://193.31.201.20:45160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e98506-6330-6c5e-ce30-00006fd90f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/i","pattern":"[url:value = 'http://123.190.20.88:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d188eb6-f480-7565-eb13-000083c9ead2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/bin.sh","pattern":"[url:value = 'http://39.74.33.201:59336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9a2f-e540-60d2-d116-00005b7e9894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/bin.sh","pattern":"[url:value = 'http://175.146.211.156:47338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783c061-dd99-cd84-6324-00000228e1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/i","pattern":"[url:value = 'http://115.48.160.237:33370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb249-8e0b-1d78-8e55-00001a7cf0e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/i","pattern":"[url:value = 'http://103.80.57.126:54698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b4d76-b63e-1d10-1113-00001d64e87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/i","pattern":"[url:value = 'http://106.40.240.24:35127/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f1a361-350d-643f-c068-0000f2f3c92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/bin.sh","pattern":"[url:value = 'http://219.157.18.143:41104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ef227b-ed1d-e28f-4244-00003bd57b8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/bin.sh","pattern":"[url:value = 'http://61.137.177.124:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a180-c363-5cfd-3dfb-0000503dd30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/bin.sh","pattern":"[url:value = 'http://219.157.10.128:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7ffb4a-81e6-1a91-69a9-0000be89198d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/i","pattern":"[url:value = 'http://221.15.192.179:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2429cd0-60de-3456-a469-00003cd99586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/i","pattern":"[url:value = 'http://39.74.33.201:59336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4594ad-b2a6-1d13-7f94-0000364d71c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:48403/i","pattern":"[url:value = 'http://210.208.110.42:48403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6491e5-3419-731e-897b-000079da4924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.200.107.56:39903/i","pattern":"[url:value = 'http://221.200.107.56:39903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8810cdd-231a-1336-f0e0-0000472d1faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/bin.sh","pattern":"[url:value = 'http://42.52.204.44:32770/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d49d3e4-1473-f232-cd83-0000ff885207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.31.205:38686/i","pattern":"[url:value = 'http://110.36.31.205:38686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc33416e-66a7-6c99-8d60-0000e08dbc2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/bin.sh","pattern":"[url:value = 'http://42.235.91.77:35029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd08df-aecc-66f7-14e1-00005faf03b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/i","pattern":"[url:value = 'http://210.208.111.74:36898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182e645-4769-9e9e-29ba-000089b5bc82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/bin.sh","pattern":"[url:value = 'http://115.62.148.107:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580935a4-c63c-d36f-e97d-0000f1eaca58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.41.77:37933/i","pattern":"[url:value = 'http://182.113.41.77:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86cb9fd9-ac6b-4ae4-319d-00008c41c67a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/bin.sh","pattern":"[url:value = 'http://110.37.106.148:49825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978e9897-ef79-e17c-503f-0000bfb24579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/i","pattern":"[url:value = 'http://61.137.177.124:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27b5b8e-d154-274a-3ad3-000081455fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/i","pattern":"[url:value = 'http://61.52.33.100:54465/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1475601-9716-929d-d931-0000f1ed0189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/bin.sh","pattern":"[url:value = 'http://61.52.156.140:46601/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de46ae2f-b5cf-c96a-9aee-0000685c316f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/bin.sh","pattern":"[url:value = 'http://45.170.224.217:57287/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--721b939c-2a54-20d6-f339-0000d076147d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/bin.sh","pattern":"[url:value = 'http://122.139.13.204:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34777fd3-5a1a-7de6-5067-00001d7f4f55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/i","pattern":"[url:value = 'http://115.63.145.118:58396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d39de9d-b07f-3deb-eef2-000041030eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/i","pattern":"[url:value = 'http://122.139.13.204:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7582d8cd-c166-5102-c89e-00002756edd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/bin.sh","pattern":"[url:value = 'http://42.55.212.26:51890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ed084b-ecfc-700b-267c-00009edb3347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/i","pattern":"[url:value = 'http://193.31.201.20:45160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c213d50e-7a81-64ea-1f3c-0000861918e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/i","pattern":"[url:value = 'http://125.44.196.6:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12dc49d-7a7d-6e28-8004-0000ebf420f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/bin.sh","pattern":"[url:value = 'http://42.224.126.91:33505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df806548-ceea-7c75-0b0c-00007fcd85cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/bin.sh","pattern":"[url:value = 'http://125.44.196.6:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1390fcab-c67a-4909-5c72-0000695dcac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/i","pattern":"[url:value = 'http://42.224.126.91:33505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649414ae-c31f-a99c-39ea-0000fe5cb5a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/bin.sh","pattern":"[url:value = 'http://222.138.119.216:49346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c62c79-3cee-b31d-1bb8-0000e4601a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/i","pattern":"[url:value = 'http://42.180.15.83:57232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80eefb79-cddf-e4ed-37cc-00001face1f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/bin.sh","pattern":"[url:value = 'http://182.115.68.225:51187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3be3f9-5fd0-7983-163e-00008a3b4454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/i","pattern":"[url:value = 'http://42.86.136.138:39726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549c3bf9-3d9a-608a-7b10-00008b683df2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/i","pattern":"[url:value = 'http://45.170.224.217:57287/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9977154-9635-329a-703a-0000c78c8d3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/bin.sh","pattern":"[url:value = 'http://216.249.4.20:36657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e4c013-c981-7a58-caf8-0000868ba99b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://120.28.135.245:34017/bin.sh","pattern":"[url:value = 'http://120.28.135.245:34017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b60989e-5d52-26de-233f-0000f7d1b135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/i","pattern":"[url:value = 'http://60.184.163.17:41849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89d0c71-23fb-1aa9-0343-0000834ee7c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.64.242:41071/bin.sh","pattern":"[url:value = 'http://105.186.64.242:41071/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf3bd79-ec68-c70f-a792-0000da8965ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/i","pattern":"[url:value = 'http://182.114.192.237:54399/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef35c14-d91f-a3da-7b65-0000dde3ff42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/bin.sh","pattern":"[url:value = 'http://60.184.163.17:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a281f6-a178-4b59-393f-00005f7f2124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/i","pattern":"[url:value = 'http://210.208.110.51:46526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51c68bd-bfc4-51f1-b218-000080d595e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.226.103:50631/i","pattern":"[url:value = 'http://42.230.226.103:50631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06568758-c895-7edd-9517-00006013c0ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/bin.sh","pattern":"[url:value = 'http://210.208.104.156:32771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a2ef96-d87b-850c-ddb9-0000ecd6ac1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/bin.sh","pattern":"[url:value = 'http://183.23.139.207:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17871253-03e9-fe39-d3d4-000091a4b300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/bin.sh","pattern":"[url:value = 'http://42.224.13.254:55917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac73f69-23b3-8b03-4add-0000eeaec894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/i","pattern":"[url:value = 'http://113.58.131.62:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e2c3d-0ff5-5f24-a30c-0000ebf4f6cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/bin.sh","pattern":"[url:value = 'http://210.208.116.107:43623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99550c01-a29c-c455-2d6b-00004200c577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/bin.sh","pattern":"[url:value = 'http://113.228.149.193:49576/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad34f8d-9655-d620-8f10-000075a01df3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/i","pattern":"[url:value = 'http://42.235.91.77:35029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312f28a7-3173-550d-52b7-0000decd9d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.94.120:47055/i","pattern":"[url:value = 'http://123.14.94.120:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e50647c-a556-d25f-2661-0000c3672b93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.181.9:49913/i","pattern":"[url:value = 'http://27.215.181.9:49913/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188f594a-a89b-9282-a837-00009f05350c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.185.8:38535/i","pattern":"[url:value = 'http://42.234.185.8:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82efb59f-8db5-d647-268e-0000ab3e1ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/bin.sh","pattern":"[url:value = 'http://175.148.29.181:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0dc3d6-f1f2-24db-e0b1-0000e314f4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/i","pattern":"[url:value = 'http://110.37.116.127:38782/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbd3b8c-fa07-a1c6-01b7-0000953b8778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/i","pattern":"[url:value = 'http://175.146.211.156:47338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9182c76-2fff-4f2d-7984-00008e57a26d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.157.254:58146/bin.sh","pattern":"[url:value = 'http://115.58.157.254:58146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e908fc-ce59-17bf-0e02-000059a71f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/bin.sh","pattern":"[url:value = 'http://42.180.11.230:34276/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684aa226-6d4a-5a8a-327d-0000c28e0971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/bin.sh","pattern":"[url:value = 'http://103.80.57.126:54698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4be416-5a0f-d858-861c-000037c13476","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/i","pattern":"[url:value = 'http://120.84.213.21:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fc0f70-9438-5382-7766-000093148f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.174.81:41413/i","pattern":"[url:value = 'http://42.238.174.81:41413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b883b71-02ed-7cf8-a65d-00007e94a378","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://96.245.232.132:44492/i","pattern":"[url:value = 'http://96.245.232.132:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a769e76-3062-056a-5de9-0000f2ae22ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.23.55.232:7702/linux","pattern":"[url:value = 'http://119.23.55.232:7702/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ac1fde-50e6-54ae-803d-0000615bbcdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.84.190.146:9593/linux","pattern":"[url:value = 'http://47.84.190.146:9593/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1524a54-3599-376d-a908-000010305434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/i","pattern":"[url:value = 'http://61.137.204.59:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08a8e1d-9b3d-044a-1dea-000048e5aaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/bin.sh","pattern":"[url:value = 'http://42.230.41.97:51870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77889c43-842e-a90a-70c5-0000b83db844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/bin.sh","pattern":"[url:value = 'http://61.137.204.59:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2896e2ae-6ebd-aee2-cd7b-000052b492f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/bin.sh","pattern":"[url:value = 'http://196.190.224.62:43470/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf37e19-6dfe-b8e7-7869-000072892a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/bin.sh","pattern":"[url:value = 'http://130.12.209.147:55609/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84df23a-9bed-b439-cca0-0000f36d9b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/bin.sh","pattern":"[url:value = 'http://123.134.41.212:48460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9952c34-e88a-7f30-098e-00006e40046e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1860c5-6333-5d2e-3ddb-00001583e229","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ecef52-a958-8390-9d46-0000eb14fef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c47eafd-b074-b592-79b0-000005436a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0aa510b-6d11-a13d-da89-00006d808c5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fc72d8-9889-df72-04a9-0000deee84b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883ff041-75b7-2ea1-708e-000027f46e51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef730e72-4fb2-0ed7-20fa-0000f48cf477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.23/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6631916d-1781-b21c-f3b4-00008dfda6da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c0d7c9-6198-3100-57c3-00003f157931","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22031b-203c-bdc9-e497-00001a481ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/bins.sh","pattern":"[url:value = 'http://94.154.43.23/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f8b35c-ac43-4fb0-8436-0000ed5e15aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.23/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df78face-9dcf-5f6e-3950-0000dfca0e02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106bde2b-3137-9c71-0e8e-000005b5bcfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.23/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43726967-79a8-7eca-b541-0000b3da58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b079588c-01b9-0529-a990-000047e2b93e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff38c0d7-476d-fc33-8b7f-00009f480934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64014230-a8e6-2dc5-c81c-00006555bd4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ec058a9-2638-b65d-ddca-0000cbd936c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d76e6-7845-12f2-7a6c-000065a36b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.46/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4112f36c-004f-43a9-91d0-00007993b49d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c86e6f0-8985-6403-790e-00004d4d446d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d384f9-60da-9955-51c6-00000e56d301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a15e7b-fd32-2607-0b3a-0000293b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.46/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ab3613-18b1-146a-8585-0000220eb36b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins.sh","pattern":"[url:value = 'http://94.154.43.46/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aade6b-e218-8b6f-52d9-0000994cc3ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a5c847-5743-b00c-3fcb-0000243cd4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b92bafe-72b0-c3d5-850b-00004b07af35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.46/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77e681a-5732-7417-7be3-0000ff5ede5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448c5f1f-faea-4fc0-045a-00003a212f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/bin/support.client.exe","pattern":"[url:value = 'https://91.92.243.232/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589621b-d74c-0054-4a2b-000027aa3bcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7739a0-237b-a6ab-742b-0000edeb71b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c19e80-e2d4-acff-9cef-000016e20b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a076e107-0e07-c376-11ae-00000f3a452f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/bin/support.client.exe","pattern":"[url:value = 'http://194.26.192.164/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd68fa8-4f32-5bee-f507-0000f0b6babf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/i","pattern":"[url:value = 'http://123.134.41.212:48460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8055ff7-a339-f160-c3d1-000009b49527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/bin.sh","pattern":"[url:value = 'http://182.114.192.237:54399/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c63b1ad-4112-4fc6-64f5-00000cb324ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/bin.sh","pattern":"[url:value = 'http://58.22.18.152:33899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf616b57-ea1f-1105-33bc-000021399e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:36195/bin.sh","pattern":"[url:value = 'http://115.55.179.35:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a12955-c289-bcc8-54dd-00007b96a597","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/bin.sh","pattern":"[url:value = 'http://109.236.46.199:42682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826f9bd3-7019-87f7-8b35-00003401e15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.225:33235/i","pattern":"[url:value = 'http://115.63.242.225:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7276eaf-f246-3740-de5b-00007826ac66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/i","pattern":"[url:value = 'http://58.22.18.152:33899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee5ddd0-58fb-c1bf-e498-00009d09dd55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/i","pattern":"[url:value = 'http://121.231.139.26:36392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f32bbc1-6cd2-30b0-00eb-0000abfd9f15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/i","pattern":"[url:value = 'http://109.236.46.199:42682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbaa57b-53ec-6bc9-946c-00005416d0fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d7f673-6275-be3e-580b-0000f8909213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/bin.sh","pattern":"[url:value = 'http://37.78.176.5:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9beb39e-9cdc-ca59-b761-0000e0cab30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/dlink.sh","pattern":"[url:value = 'http://95.155.151.113/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d951a704-2156-9af8-6fdc-00000e55a6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://chrome-windows.ru/ChromeSetupWindows.exe","pattern":"[url:value = 'https://chrome-windows.ru/ChromeSetupWindows.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81d2e60-02d7-1e4f-45b5-0000d4a0eba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.193.111:43262/i","pattern":"[url:value = 'http://125.42.193.111:43262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86410f7d-26b9-6122-d0d3-00002e1cd3e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0e2b82-f7f2-b714-1cc8-0000870f5af4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm7","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a05e8-6749-0139-3a4c-0000a54e885b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/m68k","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc146ef-f9a7-d74c-8973-00001c88c84a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/sh4","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba4f7f7-24be-09bd-6b34-0000cebb30cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mpsl","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a993a4b8-b8d6-60c2-bfe4-00009c5651bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/ppc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e76313e-4010-e906-40fe-0000a5b85e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mips","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b08591-2e75-3e95-a4ba-00008532483c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.78:38525/i","pattern":"[url:value = 'http://27.37.100.78:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db71290-76b8-b233-9b9f-00002494abbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd51ae1-4d7c-3315-3bbf-00001ac22312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/spc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134f9300-7075-a26d-cd17-00004879c065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/bins.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad091b14-f770-40c9-548b-00003fb33d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm6","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec624e29-15f5-0000-cb92-00000eac5ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.7:34859/i","pattern":"[url:value = 'http://123.11.10.7:34859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7577f479-c397-67c7-a435-000011e7d622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.137.87:60618/i","pattern":"[url:value = 'http://120.28.137.87:60618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34004aae-9aa6-d8df-59e7-00002d06927f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm5","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84219576-d219-78d1-e993-0000e4553fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202aaf38-bda9-63d4-1fae-00002c2a9856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86_64","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f9227a-1b3e-5db3-0b63-0000cec3a4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4aac669-54ad-3dcd-4df7-000018d38f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/i","pattern":"[url:value = 'http://42.231.88.100:39090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d42d8b-4461-9c63-a6f5-0000b882fde8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/bin.sh","pattern":"[url:value = 'http://42.231.88.100:39090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0032bc-d95b-3977-76b3-0000d5421604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/bin.sh","pattern":"[url:value = 'http://39.79.249.142:34161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7045a9cc-7325-f169-9457-000015b09845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.22.249:50192/i","pattern":"[url:value = 'http://110.36.22.249:50192/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58928aa3-d2a9-ddd0-353d-0000f0252466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/i","pattern":"[url:value = 'http://39.79.249.142:34161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d1bf303-0a18-5aff-dfb0-000043c48078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.4.125:52901/i","pattern":"[url:value = 'http://110.36.4.125:52901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3506b50e-35dd-9d57-fecc-00008e399759","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/bin.sh","pattern":"[url:value = 'http://78.60.75.209:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e9af9-88a8-095f-fa8c-0000d27ad161","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/i","pattern":"[url:value = 'http://123.8.45.111:33017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9680b7-b0de-f1a3-4dbe-00001688032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/bin.sh","pattern":"[url:value = 'http://123.8.45.111:33017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0e0e7c-ef4b-2578-853a-0000d0a6d408","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.233.197:57647/i","pattern":"[url:value = 'http://110.39.233.197:57647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc5342-cb5a-ad92-0194-0000a2f5ac10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/i","pattern":"[url:value = 'http://78.60.75.209:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a41e8df-e4c1-31f2-8dd2-0000e5df3fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.143.204:58754/i","pattern":"[url:value = 'http://182.121.143.204:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb6d4e7-941f-83fc-eb92-00009f8d9542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/bin.sh","pattern":"[url:value = 'http://46.236.65.43:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4ec50a-8e6f-3c5e-a9b7-0000de088feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/dvr.sh","pattern":"[url:value = 'http://130.12.182.77/dvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f3984d-625a-87df-5547-00001118f8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/tvt.sh","pattern":"[url:value = 'http://130.12.182.77/tvt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330d8dba-7928-6a45-98a1-0000cc23a4e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/i","pattern":"[url:value = 'http://121.234.156.10:48875/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becee502-beb6-b234-ef78-0000a8277960","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://sysupdate.online:443/agent.ashx","pattern":"[url:value = 'http://sysupdate.online:443/agent.ashx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30052ae-3f00-c77f-54f5-0000af1d0ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Godabeg1.exe","pattern":"[url:value = 'https://rcf.co.mz/Godabeg1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e29b1dd-2143-f400-ceb2-0000ce4be426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta","pattern":"[url:value = 'http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5740982-256d-219d-dd9e-0000906d8499","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://172.245.195.245/35/img_190431.png","pattern":"[url:value = 'http://172.245.195.245/35/img_190431.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c169dd9e-65c6-c4f9-b4ea-00000303b23b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cecf4eb6-9ac2-3518-c2b8-000050847a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta","pattern":"[url:value = 'http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb28d7c-8c3b-b0d4-d5aa-000002dfe000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/23/img_185335.png","pattern":"[url:value = 'http://107.175.88.87/23/img_185335.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9067d2e-45fe-12e0-5230-0000b5578c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/bin.sh","pattern":"[url:value = 'http://182.113.37.79:56846/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21309cd3-fcef-1ad8-72b9-000080943b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/i","pattern":"[url:value = 'http://222.219.74.117:52755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71263cc-272b-c7bc-5a47-0000d1aa6311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/bin.sh","pattern":"[url:value = 'http://27.193.35.180:45367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9bb525-28e2-ae4f-63e6-0000349fd16a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/i","pattern":"[url:value = 'http://182.113.203.98:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7578f3-0dc9-54bb-4a8c-0000847dfe66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/i","pattern":"[url:value = 'http://182.113.37.79:56846/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc046e0-8cb5-bec8-aef6-000060d3bf11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.97.97:57347/i","pattern":"[url:value = 'http://123.9.97.97:57347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d91f8f8-01f0-d4bf-6983-000014ccafac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/bin.sh","pattern":"[url:value = 'http://175.167.183.194:52110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2daee4f-8161-3fbb-8662-0000294b6a39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/blink.sh","pattern":"[url:value = 'http://130.12.182.77/blink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9468b101-4619-7be9-b543-00004b03599e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.5.94.63:4370/i","pattern":"[url:value = 'http://36.5.94.63:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9eeb1a-9423-4c7e-8e38-00004ffaf706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/bin.sh","pattern":"[url:value = 'http://42.235.1.153:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3785f4b-70e9-7db0-b591-0000eb449ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/bin.sh","pattern":"[url:value = 'http://61.52.179.141:33618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8735c9-dafc-e64f-2d5b-0000bbe53c6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/177395","pattern":"[url:value = 'http://5.182.210.174/177395']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa6f492-681c-3317-b058-000045840bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c60df5","pattern":"[url:value = 'http://5.182.210.174/c60df5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722c0ddf-85ef-8322-c6e5-0000f5d5257f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ab3","pattern":"[url:value = 'http://5.182.210.174/340ab3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eb81e5-b86a-1be9-d834-00004e1fc51e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/410ae5","pattern":"[url:value = 'http://5.182.210.174/410ae5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343b63eb-58ce-79e4-9fa8-0000ae1aab9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/56db7c","pattern":"[url:value = 'http://5.182.210.174/56db7c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3814db65-f081-62fb-5a70-0000c27c84f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78acf3","pattern":"[url:value = 'http://5.182.210.174/78acf3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc4fef-c1df-dec3-aae3-0000e3fe7e57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a0d95b","pattern":"[url:value = 'http://5.182.210.174/a0d95b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--950504a9-4ace-8cad-7993-000036d9125f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/923a9e","pattern":"[url:value = 'http://5.182.210.174/923a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba43ef4-3764-397d-3baf-0000d6c5e285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16f2c2","pattern":"[url:value = 'http://5.182.210.174/16f2c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0e4c0-06f0-f455-68f8-000094aa56bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e34be1","pattern":"[url:value = 'http://5.182.210.174/e34be1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9d52f5-d42a-182c-742f-0000414a2455","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/18c0e1","pattern":"[url:value = 'http://5.182.210.174/18c0e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77524903-ac94-e71f-314b-000052ee3f14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/033fd6","pattern":"[url:value = 'http://5.182.210.174/033fd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a122362-7e47-ddb7-b522-0000f2355cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/i","pattern":"[url:value = 'http://175.167.183.194:52110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1259bc0-6fec-9c24-35df-0000bc6854b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.69.240:41361/i","pattern":"[url:value = 'http://110.37.69.240:41361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d9770a-e52f-6082-1ab7-0000669045fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.73/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b76c29-68c2-1901-f9d2-00005fa73ad3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/xsvvfgrj.png","pattern":"[url:value = 'http://192.109.139.73/xsvvfgrj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ed2aca-4c01-ea55-8596-0000d99e04f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/jackin.png","pattern":"[url:value = 'http://192.109.139.73/jackin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d642ee-26f0-c3ae-7f2f-0000faf5e2f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/bin.sh","pattern":"[url:value = 'http://115.49.64.77:52921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91863854-c84c-0a7f-1434-00008c8759bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/i","pattern":"[url:value = 'http://61.52.179.141:33618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893b029e-7df2-7f02-ef5f-000080c65b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/i","pattern":"[url:value = 'http://115.49.64.77:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae21a26-a699-ea89-eaa1-0000369f0639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/bin.sh","pattern":"[url:value = 'http://221.15.192.179:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9011edb3-1cda-c4c7-ac41-0000b20ea824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/i","pattern":"[url:value = 'http://113.239.96.147:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68bbfcb-cf77-b229-0491-000070bbd436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/i","pattern":"[url:value = 'http://182.119.229.251:51013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce62bf99-5f77-fc6f-22df-0000c655741c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/bin.sh","pattern":"[url:value = 'http://182.113.203.98:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb50c70-5874-774c-4c24-0000b739252f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/bin.sh","pattern":"[url:value = 'http://115.50.98.44:53110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f153954-3d76-c0fa-483e-0000fc9aaacc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/bin.sh","pattern":"[url:value = 'http://110.37.26.69:40361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c14dd45-42ff-b482-beb7-0000ac6b6596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04152430-d166-02e2-f719-00004c28a577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.113.164:60386/i","pattern":"[url:value = 'http://219.156.113.164:60386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06eab4a-7588-99fb-673b-00006e826405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm4","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e752061-c70c-d658-27b0-000008884596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5473021-8765-f8c0-f5b0-0000fa078b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/k.sh","pattern":"[url:value = 'https://94.154.43.60/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf1409c-0698-0171-398d-00003abc890f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.aarch64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895da45d-0b3c-947a-393b-00004fa3ac60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mipsel","pattern":"[url:value = 'https://94.154.43.60/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c02591-107f-ff88-2c2c-00007b308527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm4","pattern":"[url:value = 'https://94.154.43.60/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1fe04c-d0fc-392f-d271-00005e80cf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mips","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43bbe3a-d0b6-c08b-72f5-000016c74f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86_64","pattern":"[url:value = 'https://94.154.43.60/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf7d567-c1e8-a34f-5189-00006678ce22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86_64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5967faf0-f8e8-358a-5295-00007c37cbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm7","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c9742b-8c80-7d9e-b2ab-000069852ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm7","pattern":"[url:value = 'https://94.154.43.60/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b16e97-d21c-6832-63e8-00004b322ebc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mips","pattern":"[url:value = 'https://94.154.43.60/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e191cf00-5d83-8536-d90e-00003f1c2d1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mipsel","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a12788-ca3b-4c8a-2f12-000060442ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86","pattern":"[url:value = 'https://94.154.43.60/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1390ca6-a03a-25b1-5618-0000da33a3d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/killbotx.x86_64","pattern":"[url:value = 'https://94.154.43.60/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af43a1be-7fe9-0f52-0b81-0000637f0b99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/aarch64","pattern":"[url:value = 'https://94.154.43.60/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21417a4-8d24-3165-295e-0000355ee05b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/bin.sh","pattern":"[url:value = 'http://112.247.84.112:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859d6ccd-90e8-1a5d-00a1-00002af78b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/aarch64","pattern":"[url:value = 'https://quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c979ab7-0d55-c51c-1555-0000d1a2c930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86","pattern":"[url:value = 'https://quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0795af26-1b32-3729-9ecd-0000614cb816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dd59c1-21b9-9004-1f17-0000f700f1b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86_64","pattern":"[url:value = 'https://quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9cfe9c-b9df-8cc1-1e66-000073f917f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00944c77-13b1-0165-daa2-00000e666c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9c3e11-a3fb-f91b-af55-000051ee4854","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm4","pattern":"[url:value = 'https://quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bb43a6-5656-9625-9cc3-0000ae641286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mipsel","pattern":"[url:value = 'https://quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d692e64-e80d-158a-9643-000084c1f60f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78a3361-56de-5b91-9332-00004465eb10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d9f819-739a-212e-4ffd-0000c4ebdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec03ce-7be1-7516-65b9-0000edd603f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/bin.sh","pattern":"[url:value = 'http://112.109.219.147:35136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ad4b3d-7f0b-e2c5-08b5-0000632f7a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm","pattern":"[url:value = 'http://176.65.139.232/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e17bb6-a660-161c-2aef-00002e63b53c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm7","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893219cb-94e3-c88b-4799-00003a5bc41e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f52667-2dd9-205e-6f00-0000b7e71db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5770013a-ef5c-8500-6d6f-0000949465c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mipsel","pattern":"[url:value = 'https://iloveboats.st/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bb0ddd-9132-af1b-ae14-0000983af7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mips","pattern":"[url:value = 'https://iloveboats.st/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a53e4b-42b0-73fe-ede2-00006fc06b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.aarch64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d2eb3-9267-87d3-644c-000046d870ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mipsel","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c31761-6c2b-1918-9835-0000ba8df397","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm7","pattern":"[url:value = 'https://iloveboats.st/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6446c57f-10a0-28f5-2678-000082e9ad09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36956fab-e04a-d675-ab41-0000435be7ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm7","pattern":"[url:value = 'https://quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d569b-4777-7681-a930-00008ad78457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/i","pattern":"[url:value = 'http://136.60.32.162:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4a0377-f44e-a7ab-9bff-000018ecc06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29378e79-29ee-3739-7357-0000b2eb0692","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03edfc3-6b4e-56ae-9e43-0000a05ea97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ae8ea4-7a7d-85fb-10f8-0000be698bac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86","pattern":"[url:value = 'https://iloveboats.st/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a06bc0-6f3f-f329-a553-00003506c2ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mipsel","pattern":"[url:value = 'http://176.65.139.232/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b78e0-4fba-33ff-264f-00005b7cfe94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/aarch64","pattern":"[url:value = 'https://iloveboats.st/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42043af-29f8-491f-bfd1-0000c6686319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b80ec84-0401-bcf4-5e22-00000d39c939","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3edb59a-9e1d-71cf-4d07-000043fbbc63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b09bc9-20df-f112-d7fe-000033dc08a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/k.sh","pattern":"[url:value = 'https://mail.quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73988d49-606b-abad-6f5f-0000fbc40ee2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed7517-dee1-3520-d3c3-000061ece3cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mips","pattern":"[url:value = 'https://quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc82c20-14c4-4a29-0892-000060b5229f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/killbotx.x86_64","pattern":"[url:value = 'https://iloveboats.st/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae82a0c-981a-ffa6-4692-00003cd61ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm4","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9d4f69-e387-f647-0d25-00004a2f09ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6698220b-3f58-d2f7-c3cd-0000a145f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c26395-d974-e810-ad37-00003414a425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bca46db-1fb0-6854-05ca-0000a8385c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm4","pattern":"[url:value = 'https://iloveboats.st/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131b2ba1-3868-7147-f2dd-0000d0d9466f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/k.sh","pattern":"[url:value = 'https://quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3799610a-408d-2766-50f8-00000cd4b149","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mips","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b4871-408d-e797-b15b-000028ee6bf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94659c8-8505-ddb8-df8d-00009f0c8027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a161b5d-2c94-ea66-20b9-0000cdf086fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86_64","pattern":"[url:value = 'https://iloveboats.st/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--974d536b-10bf-693b-417c-0000290f5242","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/k.sh","pattern":"[url:value = 'https://iloveboats.st/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc671a7-84f3-0c23-75cd-00006c6221f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.x86_64","pattern":"[url:value = 'http://176.65.139.232/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30833fac-86e2-e5c1-479f-0000087b193c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.i686","pattern":"[url:value = 'http://176.65.139.232/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326fabd8-ef82-88d8-e646-0000e71238ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm7","pattern":"[url:value = 'http://176.65.139.232/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e617b164-b21d-2eef-580a-0000c5a53c8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mips","pattern":"[url:value = 'http://176.65.139.232/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05952fa8-fe24-1acd-fc85-0000b16416d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.sh4","pattern":"[url:value = 'http://176.65.139.232/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2d424c-2df6-5fd0-22f6-00000a6640e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efe972e-838e-8eef-1a08-0000a2a0eddc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df25610-a44e-ea77-bef9-000057028f11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a4e295-e070-1dfa-b368-0000b25dc972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/i","pattern":"[url:value = 'http://110.37.26.69:40361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d4b388-4962-efea-2ab6-00005506e401","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.aarch64","pattern":"[url:value = 'http://176.65.139.232/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c7cdff-0e79-f3aa-81e0-000031ba8f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.ppc","pattern":"[url:value = 'http://176.65.139.232/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad84afc-69e3-83b1-b23b-0000ca363219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99b8d0f-45c7-495a-97c5-000016daaeb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b132d146-77ad-173e-aa2b-0000d09511b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77b8e9d-5946-d056-f10f-0000636a73bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b701a83f-5884-e6b8-7b87-0000ca98e1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.228/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540893da-496a-fa4d-62d2-000020dfa4f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/bin.sh","pattern":"[url:value = 'http://112.248.106.46:52448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06b34d4-fe5c-11e1-80f5-00001fbc9395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86_64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810b0206-a10f-a517-85f4-0000551f8297","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/bin.sh","pattern":"[url:value = 'http://115.63.145.118:58396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23e931-8e9d-93f5-a1c2-0000fc04f355","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/bin.sh","pattern":"[url:value = 'http://115.61.41.247:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adea0b27-11ea-ceb8-21b2-00006a5fc7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/i","pattern":"[url:value = 'http://78.25.149.153:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b37814-b29a-2273-d73e-00005ad75f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/i","pattern":"[url:value = 'http://115.61.41.247:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d6e02b-efae-71ea-a596-0000f1a068c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.226:56122/i","pattern":"[url:value = 'http://115.56.147.226:56122/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dab1cd-1859-3d65-d068-0000f6d9e40a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/bin.sh","pattern":"[url:value = 'http://110.136.97.153:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff58d37-c5eb-ec08-d8bf-000096a85601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.bak.20260810122841","pattern":"[url:value = 'http://95.155.151.113/unifi.bak.20260810122841']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55f9ed3-f0f3-401b-2c01-00006faf25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.51.94:48009/i","pattern":"[url:value = 'http://115.63.51.94:48009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54d6c44-90ae-1afa-58b9-000042c079f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/i","pattern":"[url:value = 'http://110.136.97.153:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ecd100-3f76-af97-0d82-0000c5e91f97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d8668","pattern":"[url:value = 'http://5.182.210.174/7d8668']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0576a084-2f73-06da-878d-0000052b9e17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4850bd","pattern":"[url:value = 'http://5.182.210.174/4850bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128128e4-9d26-9a4d-1501-00009d7f20dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff5279","pattern":"[url:value = 'http://5.182.210.174/ff5279']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014a23af-fab3-55c2-97f6-00000ef2801d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5490a4","pattern":"[url:value = 'http://5.182.210.174/5490a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2437714f-27b2-c9ea-62d1-0000012962cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2150fc","pattern":"[url:value = 'http://5.182.210.174/2150fc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ec4227-4bc4-d41e-553c-0000a287967d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3e070d","pattern":"[url:value = 'http://5.182.210.174/3e070d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581b1cb8-98d1-4807-6b05-000053297eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e26c93","pattern":"[url:value = 'http://5.182.210.174/e26c93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1bfd3-8bf3-40f5-67e6-0000cfe9ae17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45d538","pattern":"[url:value = 'http://5.182.210.174/45d538']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9254dddc-3b72-2666-a5ce-00002875a7d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad704a","pattern":"[url:value = 'http://5.182.210.174/ad704a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f29b82a-dcf4-a45b-7560-0000af023a4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/498482","pattern":"[url:value = 'http://5.182.210.174/498482']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b042e-5d0f-1d79-0491-000028ac2221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/def5c2","pattern":"[url:value = 'http://5.182.210.174/def5c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e03fd-6100-bc06-88e3-0000c84dba6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd9da7","pattern":"[url:value = 'http://5.182.210.174/bd9da7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fea9f9a-94e9-e1c3-c5a0-0000b2f4e524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e00f60","pattern":"[url:value = 'http://5.182.210.174/e00f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07175a33-79af-9346-8994-000011dc2e79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/650040","pattern":"[url:value = 'http://5.182.210.174/650040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e2c0b-5dee-f847-5b4d-00001dc4ccb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/894fc5","pattern":"[url:value = 'http://5.182.210.174/894fc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55d72dd-60ce-7068-9e05-000079f4d505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e40c97","pattern":"[url:value = 'http://5.182.210.174/e40c97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a189028-afad-2d8b-6b61-0000a0054090","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/17949b","pattern":"[url:value = 'http://5.182.210.174/17949b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88be2fa-61d6-35b9-40ff-00005a0778c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm4","pattern":"[url:value = 'http://94.154.43.60/fallen.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86f8847-0872-60ac-0904-0000aff4b0a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ea4b7","pattern":"[url:value = 'http://5.182.210.174/9ea4b7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b447ae-e605-8bed-02fa-000054a49be2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05416a","pattern":"[url:value = 'http://5.182.210.174/05416a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a6605b-6cd1-f586-43eb-0000ced7e953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0654cb","pattern":"[url:value = 'http://5.182.210.174/0654cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c368b1a-b975-6140-edac-0000f20ab73d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dca7ad","pattern":"[url:value = 'http://5.182.210.174/dca7ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff65fc2-6814-11b4-fbd1-00000fa0115d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d69405","pattern":"[url:value = 'http://5.182.210.174/d69405']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15e3a1d-2e47-a0e2-97e1-000049f2d7e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea4b38","pattern":"[url:value = 'http://5.182.210.174/ea4b38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb216b7d-edeb-3b19-16c1-0000623f1c54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a200f","pattern":"[url:value = 'http://5.182.210.174/4a200f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6cd3b7-2e09-2792-ca9d-0000da76169a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6441d0","pattern":"[url:value = 'http://5.182.210.174/6441d0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f433e-c148-03d7-ec9d-0000e7b4cd1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1e2ea","pattern":"[url:value = 'http://5.182.210.174/c1e2ea']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab61b86-fb4b-9e5f-d8d8-00009afaff55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4403a","pattern":"[url:value = 'http://5.182.210.174/f4403a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12c7113-f295-c006-43d7-0000eeea7c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9e14a1","pattern":"[url:value = 'http://5.182.210.174/9e14a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1a405b-cbb0-bf2b-8d1a-00009984322e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f41d69","pattern":"[url:value = 'http://5.182.210.174/f41d69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbfc4c6a-4d6c-b926-5d9b-000059f1b5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8f41cf","pattern":"[url:value = 'http://5.182.210.174/8f41cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425fa11d-6de9-67ce-d5ac-0000ac40b402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7ba4cb","pattern":"[url:value = 'http://5.182.210.174/7ba4cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b39a63-f40e-081e-4302-00006721b093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9cb1d9","pattern":"[url:value = 'http://5.182.210.174/9cb1d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb396b3-ceff-95eb-3860-0000461dca33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76e8cc","pattern":"[url:value = 'http://5.182.210.174/76e8cc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa06d6f-a87e-0831-a6df-0000b1787f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/84e985","pattern":"[url:value = 'http://5.182.210.174/84e985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b12dd66-c58f-e381-95ee-00007f03385d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d72242","pattern":"[url:value = 'http://5.182.210.174/d72242']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f296e7a-98c5-5d35-5f33-000014dc76f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6501cd","pattern":"[url:value = 'http://5.182.210.174/6501cd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3182b340-b391-e51d-eb1b-000048b2d728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm7","pattern":"[url:value = 'http://94.154.43.60/fallen.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313f695a-5f13-e20c-c1b2-00009704132a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b802381-b143-408d-2377-00004790c043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d53f3f-371a-bd47-79c2-00007526ebb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44664e9-511c-e64d-e72d-0000cc6be473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc24d5-faa2-f0d8-0cbb-00004c0bacbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a752c94-5575-e55b-3827-00001732bbd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:7001/bin.sh","pattern":"[url:value = 'http://110.36.11.225:7001/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb28533-8040-be6c-8819-0000b1c0a082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f3e1a2-43a7-9686-05cf-00004d5bad8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8456c34c-3907-241f-473e-0000ef2941c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3758d21-43dc-8026-fa2a-000063bb0a6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/i","pattern":"[url:value = 'http://112.247.84.112:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4f0368-612e-2211-f8cc-00007ffcd00f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.86:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a901c-8ff9-597c-0253-000006023d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.153.126.58:36155/i","pattern":"[url:value = 'http://183.153.126.58:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd69849-e8e6-6558-0cce-00005d15844e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/i","pattern":"[url:value = 'http://119.116.20.47:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248b92ce-8f4a-0d20-750d-0000565a4cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/bin.sh","pattern":"[url:value = 'http://119.116.20.47:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f224b435-e302-f289-0b7e-00006a7ced4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/bin.sh","pattern":"[url:value = 'http://60.18.11.118:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6038d2b-900d-6b3a-5bea-0000d74a5be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/bin.sh","pattern":"[url:value = 'http://42.234.166.234:40751/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee1e149-5bed-1afd-7f14-00001b55e34c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.235.239.199:45573/bin.sh","pattern":"[url:value = 'http://124.235.239.199:45573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48891a3b-4741-c548-1288-0000f8018ec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.48.28.98:35726/i","pattern":"[url:value = 'http://36.48.28.98:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1588d6d5-e00c-96ff-c800-00004b35dbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.57.227:57005/bin.sh","pattern":"[url:value = 'http://115.55.57.227:57005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa89fc4b-a360-e598-9ef7-0000a4d4b240","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/bin.sh","pattern":"[url:value = 'http://42.235.174.78:56482/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482e612a-734a-f8cd-1d88-0000619cd1f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.31.73:46065/i","pattern":"[url:value = 'http://182.113.31.73:46065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93045fe3-8410-8b45-426b-0000659cae46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/bin.sh","pattern":"[url:value = 'http://39.77.117.255:35209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b5d322-dcfa-0fbb-eb46-0000dea1061b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.209.29:47837/i","pattern":"[url:value = 'http://182.123.209.29:47837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15b8c19-6989-15e0-b5fe-00008c0e82ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.239.199:45573/i","pattern":"[url:value = 'http://124.235.239.199:45573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d29d20-1aef-337d-725f-000060094473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.68.164:58733/i","pattern":"[url:value = 'http://61.52.68.164:58733/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64d3c24-014f-f176-3ef3-0000b0acef96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/bin.sh","pattern":"[url:value = 'http://221.205.10.123:45052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb32b6d4-84ce-adf0-e8dd-000004be8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/i","pattern":"[url:value = 'http://60.18.11.118:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34bbd76-abc9-6473-16ac-0000146f1962","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/i","pattern":"[url:value = 'http://39.77.117.255:35209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab55aa9-9cc7-8b05-070d-0000d980d166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.105.15:56982/i","pattern":"[url:value = 'http://219.156.105.15:56982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca0f324-9260-6cbb-bae4-00002275ba28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/i","pattern":"[url:value = 'http://221.205.10.123:45052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e87539-ea8f-1eac-ed72-000023557ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://waf.proxytunnel.co:889/gg11","pattern":"[url:value = 'http://waf.proxytunnel.co:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15a7c-d187-430f-d8e4-000055afe2ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.m","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2535b9-476f-6648-07d1-0000d7cc96fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/i","pattern":"[url:value = 'http://112.198.193.62:36489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd071657-38dd-07c0-e093-00001f795d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.a","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18da9424-1f09-6a6a-cadd-0000b819df5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/bin.sh","pattern":"[url:value = 'http://112.198.193.62:36489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f99686-2a64-007a-5242-0000f2b44528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/i","pattern":"[url:value = 'http://115.58.177.86:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ce02db-8efc-28dc-1726-00003b4012bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/bin.sh","pattern":"[url:value = 'http://182.127.103.153:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2c5670-7f3b-a957-9cb6-00007ebebb11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e326cff-26e7-f246-1fb1-00004b710426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/i","pattern":"[url:value = 'http://123.8.90.13:33466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7349ed5-c979-0073-1972-0000b142e183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/bin.sh","pattern":"[url:value = 'http://112.198.138.178:59015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643098e1-84f1-28e4-0f1a-0000c317cfe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/i","pattern":"[url:value = 'http://66.8.135.142:50647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8279d7b-403f-df9c-bf65-0000cd37838b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/bin.sh","pattern":"[url:value = 'http://42.235.94.77:54061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8d18ed-771c-d417-a25b-0000445e6102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/i","pattern":"[url:value = 'http://42.235.94.77:54061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2c965f-cc73-dff5-b55d-000086556d57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm7","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfbb9d2-d309-e998-0589-000065139a88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11724a8a-2e63-9c08-1a3d-0000ac496c76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm64","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df548ce3-6cc0-7377-c84b-0000a4e26922","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mips","pattern":"[url:value = 'http://95.155.151.113/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521f6583-4e6b-6645-1d0d-000082877232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/bin.sh","pattern":"[url:value = 'http://42.53.51.109:44329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a864a2a-ba74-0a6e-d22e-0000cfe10768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0a79-41cf-a6ae-ae98-000011bdd329","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86_64","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50993476-4945-5817-3e3f-000096f3890b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/i","pattern":"[url:value = 'http://112.198.138.178:59015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55894959-1f65-36e0-84b9-000022c49f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/bin.sh","pattern":"[url:value = 'http://125.45.64.34:37683/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828ab63e-fb5d-1b77-bac4-00006571eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/i","pattern":"[url:value = 'http://125.45.64.34:37683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3bf6e69-58fa-6d04-1460-000013d05dc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.27:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2a0fa1-7869-75d9-f7c5-000070efa7ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/i","pattern":"[url:value = 'http://123.173.101.27:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135bdeb1-5414-c209-c138-0000d3e8b177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/bin.sh","pattern":"[url:value = 'http://125.44.43.60:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea066d4-239b-84f2-ef71-00009b87b7b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/i","pattern":"[url:value = 'http://124.92.80.153:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cdd181-5af9-308c-eb0c-000069777e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/bin.sh","pattern":"[url:value = 'http://61.52.94.69:44759/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa797254-f61e-97b3-0bde-0000ab131184","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/bin.sh","pattern":"[url:value = 'http://38.43.193.197:44535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472e07b1-d439-635b-f799-0000a37d4ac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/i","pattern":"[url:value = 'http://175.172.13.19:60669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc7841c-9376-90db-aede-0000bba5152b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/bin.sh","pattern":"[url:value = 'http://210.208.110.21:51285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61ec185-c547-3f68-ce3e-00003b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/i","pattern":"[url:value = 'http://38.43.193.197:44535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39539dde-8664-8927-9563-000045eca9b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.202.64:34690/i","pattern":"[url:value = 'http://219.155.202.64:34690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e5b6e8-d21e-e176-3e54-00003178db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/bin.sh","pattern":"[url:value = 'http://42.180.15.83:57232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a41de6-02f0-3c90-c140-000077cee212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/bin.sh","pattern":"[url:value = 'http://175.147.159.41:36190/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d723ae-2fef-af48-dae0-0000818e0572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/i","pattern":"[url:value = 'http://210.208.110.21:51285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2895e21-bc02-82d2-b1d8-00007da522e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/i","pattern":"[url:value = 'http://61.52.94.69:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daad9a0-6bcf-7253-9967-00004bf72ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/bin.sh","pattern":"[url:value = 'http://78.25.149.153:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3cbc1a2-a878-17d0-7409-0000f0dd3124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/i","pattern":"[url:value = 'http://211.158.166.117:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67568aea-0618-0b43-48fe-0000136794bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/i","pattern":"[url:value = 'http://71.207.128.92:54954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49bac6af-bd26-c491-f057-0000904675e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/i","pattern":"[url:value = 'http://115.50.98.44:53110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f61b257-a612-53d0-6154-000071c3e040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/bin.sh","pattern":"[url:value = 'http://121.234.156.10:48875/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0422cb-b21c-c24b-4472-0000c953be9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.176.25.195:35054/i","pattern":"[url:value = 'http://160.176.25.195:35054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f3b117-bbef-3f0c-9460-00003475cce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/bin.sh","pattern":"[url:value = 'http://125.44.223.124:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66373e4d-de76-01d7-2e31-0000754ce529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8061d6a-368d-f0c1-1fab-0000a739c2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/bin.sh","pattern":"[url:value = 'http://182.119.229.251:51013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b769c35-3d4d-9403-ed0c-0000b24473d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/bin.sh","pattern":"[url:value = 'http://219.155.195.159:54905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dddfe4-a64a-5d0f-4adb-0000a45f4a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/bin.sh","pattern":"[url:value = 'http://61.52.217.13:59440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef473a-d894-882d-d0af-00005207034d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/bin.sh","pattern":"[url:value = 'http://115.58.54.222:37664/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e3eba9-6bb1-c319-8da2-0000a656ba16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.37.213:45304/i","pattern":"[url:value = 'http://42.230.37.213:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bf0e12-069e-7f32-ea74-00002e89b127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/i","pattern":"[url:value = 'http://42.232.108.113:57428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168d737-33cc-3735-7eb3-000058420cd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/i","pattern":"[url:value = 'http://125.44.223.124:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3584a696-fdf7-d51d-738f-00001f60dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/i","pattern":"[url:value = 'http://61.52.217.13:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13014b24-cd21-15c0-c550-0000afb80dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/i","pattern":"[url:value = 'http://115.58.54.222:37664/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9703497-34ee-91ae-25bd-0000e70569e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/i","pattern":"[url:value = 'http://219.155.195.159:54905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8422b44-f986-7232-75b9-00006d47bd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/bin.sh","pattern":"[url:value = 'http://125.44.19.167:51278/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d864e57-f051-d6f7-2cc9-0000f7a43998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/bin.sh","pattern":"[url:value = 'http://110.36.86.83:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f63bfb8-2426-0277-b7ea-000088dd688c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/i","pattern":"[url:value = 'http://140.237.36.213:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36178fb6-8409-b3e7-6382-00000a6dc679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://myissuereport.live/i/PDF-ticket/download.php","pattern":"[url:value = 'https://myissuereport.live/i/PDF-ticket/download.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0491f833-7ba3-5ef7-8a02-00008936d604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c727d1-6a8e-0ca8-3183-0000a7f8ff3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.173.164:46012/i","pattern":"[url:value = 'http://123.5.173.164:46012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99d9cd2-2d4d-f518-0aa3-000029318ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/i","pattern":"[url:value = 'http://125.44.19.167:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985b6e6-3be5-6f65-cd26-000076549754","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/bin.sh","pattern":"[url:value = 'http://123.129.131.159:42876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d6560e-34d1-17b1-fbe3-00007db9e53f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/i","pattern":"[url:value = 'http://123.4.178.145:35087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05423c79-2d83-b591-be0e-000044774f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09410297-1aeb-dbed-12ce-00003fc7f856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5892f4ee-c3f8-aad3-7074-000039db6e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2e801e-0a2b-2736-1884-0000059b5e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acb7694-6c6f-02d3-7396-00007bbf90a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/Exodus.sh","pattern":"[url:value = 'http://176.65.139.228:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92166770-16c1-9172-4f62-00007eef655d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mips","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7172b2-b7cf-7e1d-3c77-000008a735e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x86","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf726934-8df6-c8f4-e4a8-0000dd20c8a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a230d146-a5d5-dda8-705a-00003e9b708c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf58b629-7ff6-8907-192f-000014c5e8f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/ohshit.sh","pattern":"[url:value = 'http://209.141.44.218/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e86f60-8201-2179-4772-0000f01593a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x32","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bebf75-f40c-1839-0e8c-0000e9c8c308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mipsel","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427055a-46eb-b215-468b-00004d20af92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c2eddd-a864-4623-a254-0000ef9dcd66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.99/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d946a51-62d8-a90f-2c61-0000f178d574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/i","pattern":"[url:value = 'http://124.235.243.150:48322/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7186526-c8de-52ca-f27c-0000c350788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ac3c48-a71f-1a9f-fcaf-0000266c0f89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://yogasitesdev.wpengine.com/2/","pattern":"[url:value = 'https://yogasitesdev.wpengine.com/2/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a675331-9dbb-82f7-bc10-0000939f304f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e73ab47-f249-90ba-46c0-0000055c9b11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f63c84-4d08-91fe-6fb6-00003567d8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/payload.sh","pattern":"[url:value = 'http://149.50.154.101:8000/payload.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1215e6b6-e9b6-b2a5-4c41-0000505c779f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.loong64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.loong64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cf6339-94f0-a8a9-8e5b-00009ac77c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/bin.sh","pattern":"[url:value = 'http://115.192.88.110:35897/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea0746f-214d-e8a5-e339-00002a78d607","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/bin.sh","pattern":"[url:value = 'http://115.49.203.6:36171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d276a9d-802d-1b0a-2e99-00003ba55876","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ac8c9f","pattern":"[url:value = 'http://5.182.210.174/ac8c9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71b6c78-27d5-b817-9732-0000edb991b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bf39af","pattern":"[url:value = 'http://5.182.210.174/bf39af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee0a026-6614-9243-4d4f-0000c6bb2183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81ee8a","pattern":"[url:value = 'http://5.182.210.174/81ee8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b65fb7-b180-39d8-a979-00002b46fa1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Zzz","pattern":"[url:value = 'http://129.121.110.105/Zzz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25deb51-0f36-6ead-4c50-0000315806a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e748fa","pattern":"[url:value = 'http://5.182.210.174/e748fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f56e3eb-5973-9547-b831-0000a69a2e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vkZ","pattern":"[url:value = 'http://129.121.110.105/vkZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f65803-ffbd-3734-8ed8-0000d08c7bf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b73206","pattern":"[url:value = 'http://5.182.210.174/b73206']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098f0077-9302-bf01-366b-0000d8cfa5c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2020be","pattern":"[url:value = 'http://5.182.210.174/2020be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed071e35-b9b0-03ae-ff10-00009cf3c844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3066","pattern":"[url:value = 'http://5.182.210.174/cf3066']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24fcfd1-4a45-6f17-db47-0000d23c8d8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/oaF","pattern":"[url:value = 'http://129.121.110.105/oaF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e77e2a-80ad-3ec6-2524-00004e7ea5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/30e00c","pattern":"[url:value = 'http://5.182.210.174/30e00c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a28d6c67-58dd-5733-5d6f-0000e3af439f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ozDb","pattern":"[url:value = 'http://129.121.110.105/ozDb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48a461-192f-f799-1a64-00000f0f54c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/968def","pattern":"[url:value = 'http://5.182.210.174/968def']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ac114-709e-ab3e-df28-000090df2029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/f2Um","pattern":"[url:value = 'http://129.121.110.105/f2Um']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3124389-d4a7-459c-9a6a-0000327f08fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/63ab9c","pattern":"[url:value = 'http://5.182.210.174/63ab9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c122cf2-8be5-bf06-f212-000088bef8fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9aaf74","pattern":"[url:value = 'http://5.182.210.174/9aaf74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26fe9173-7c85-6666-f61f-0000909ef7c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05f7c6","pattern":"[url:value = 'http://5.182.210.174/05f7c6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019b162-991b-d9e2-6d3e-000026906da9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/WzCx","pattern":"[url:value = 'http://129.121.114.124/WzCx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f28ca8d-21dd-e39b-9d1d-0000193b5a2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1Gk","pattern":"[url:value = 'http://129.121.114.124/1Gk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a6e3fe-dd7b-9c39-60c3-000001cabd70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/4YN","pattern":"[url:value = 'http://129.121.114.124/4YN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d9a783-241b-8420-9a12-0000094ca07f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1sPM","pattern":"[url:value = 'http://129.121.114.124/1sPM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c19650-2e0a-076b-e638-000053b2b4dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/FyTv","pattern":"[url:value = 'http://129.121.114.124/FyTv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8601ce0-33e4-38b4-f695-0000f651a9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm5","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52234cfd-9540-d8e3-5f87-0000b7c1d404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.22/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67803707-e038-2c41-c885-00008c867058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f220a6-ecf8-f325-2e61-0000efb4d30b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49d3da5-1685-e70d-02ed-0000cf937dd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3980fc-5ce7-c783-79b1-00002c2edf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm5","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d316b479-9f24-7b94-4ef7-0000db2bc84f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e67ca8-77c1-59ad-db43-0000e9fe3853","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.spc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a0c2f1-c859-8753-d9ba-00006f6a4afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d537e1d0-7068-1067-a704-0000862717e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db75a4-86fa-9165-eb61-0000694e362a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad64a143-2755-564b-6a43-00007b695e73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd12f33f-fbc9-6d6c-8483-000017692488","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d63cfba-738a-4fcb-673b-0000a466c546","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.m68k","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014ffb6c-1751-e81c-c4bb-0000a490139c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mips","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ca4433-c591-e998-a8ff-00003dffbf90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85c38bc-2d2d-9c1a-7dad-00004d70e306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pin_img.png","pattern":"[url:value = 'http://64.224.17.122/pin_img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746e05ac-a760-4e9d-d462-0000f36959c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pinmsi.png","pattern":"[url:value = 'http://64.224.17.122/pinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876277d0-aef5-5cd6-54ce-0000ba3d9f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/efd.dat","pattern":"[url:value = 'https://bapak178.org/efd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2476bb-364a-19a3-f42c-0000781b6e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://admetricslab.org/get_verify?i=27407","pattern":"[url:value = 'https://admetricslab.org/get_verify?i=27407']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57374267-0de3-63fd-b1dc-0000c31c10d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/gwb.dat","pattern":"[url:value = 'https://bapak178.org/gwb.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b8334e-9ab3-bfe4-cb89-0000bfa3bb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ownnewstoday.live/MicrosoftVerify.msi","pattern":"[url:value = 'https://ownnewstoday.live/MicrosoftVerify.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c735e3-c169-4061-dc66-0000f8e3be3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/i","pattern":"[url:value = 'http://115.192.88.110:35897/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc9a805-afc7-7a1e-a95a-000076dbcbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/i","pattern":"[url:value = 'http://115.49.203.6:36171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1dc3b58-b124-4177-748c-0000250e4b80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe","pattern":"[url:value = 'https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cb92b7-d5cd-5c5b-e39a-00007ba65efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/gold/random.exe","pattern":"[url:value = 'http://62.60.226.140/files/gold/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff94e69-28f4-f5ff-1f73-000019eb9d0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/amka/random.exe","pattern":"[url:value = 'http://62.60.226.140/amka/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2ef09b-e010-1b4b-1eb0-0000cd5afec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta","pattern":"[url:value = 'http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e851ee-7ba3-90e3-31d7-00005a7bbedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/img/img_220749.png","pattern":"[url:value = 'http://147.182.181.241/img/img_220749.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515a7305-fca2-6c9b-8c0f-00007d1115cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojscrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojscrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f645fff-72a8-4d9b-988c-00003d1295a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://duct-master.com/00/newMSI_PRO.png","pattern":"[url:value = 'https://duct-master.com/00/newMSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c607f59f-0ffb-7a8b-b4d5-0000f5963afe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/bin.sh","pattern":"[url:value = 'http://42.232.108.113:57428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73237b3-2134-6fa6-7129-00006bbef4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.255.40.244:42822/bin.sh","pattern":"[url:value = 'http://58.255.40.244:42822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a1727c-43af-db4c-6898-000015455c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.156.166.167:43949/i","pattern":"[url:value = 'http://94.156.166.167:43949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd186ef-54eb-0d2b-3c28-0000cac50fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install_tm.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install_tm.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1ed920-1184-83c1-47f3-000066ce40a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa3df7c-8ed5-84b8-a72e-0000e0e2fff2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.47.72/22/goodthingsforbestfutureforme.hta","pattern":"[url:value = 'http://107.173.47.72/22/goodthingsforbestfutureforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7d7d7d-38ff-d2bd-8154-00001c7ab46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.173.47.72/22/img_172149.png","pattern":"[url:value = 'http://107.173.47.72/22/img_172149.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98c4c9b-0042-058e-65c2-0000bdf2dd74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd9bf2e-d660-6d0b-22b4-00005af7f6fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'http://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82515586-5283-0e02-c57c-0000ca6eea6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'http://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5eda470-ce14-8c82-1081-0000b457ca73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c7d80e-e7a8-900e-6765-0000b2097047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/bin.sh","pattern":"[url:value = 'http://140.237.37.249:40109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf378d43-fee4-ec4e-e372-0000b03a3581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://sh.classera.com/Naew8m","pattern":"[url:value = 'https://sh.classera.com/Naew8m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3602f2-5925-11a1-6a9b-0000bfba15c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79111d42-6d19-87c9-86ba-000012b45097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd21df52-af7c-68ac-f58f-0000d1877643","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b94e93e9-41cc-1554-ee30-0000994d1b76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'http://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526a45cf-ad77-9db3-495e-00004eeca787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'http://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ba7be6-1c34-76a9-4565-0000be661374","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'https://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f670eac-0cf7-1fbc-954e-000069413880","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9951e7fe-331e-961a-37de-0000467f1fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/i","pattern":"[url:value = 'http://140.237.37.249:40109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7613b42-c2f7-6ced-1e96-0000816fa201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9872ebc0-b15e-8750-1079-00006658e941","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb80649-1448-c304-dffd-000018dd6fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6937ac60-6641-9a58-230c-000006aed80d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'http://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2423c8a-befb-7cd6-41df-0000f3f58269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae6503a-0265-060b-b374-00002e583f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6058cd-e718-811a-19aa-000052d1f662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a9163-accd-0c49-270f-0000666d1391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73250d3-1b71-73eb-7ea6-000009d5c2c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978583c3-811b-f730-e1d5-0000eae3d107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta","pattern":"[url:value = 'https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eac2c28-d2e9-1638-5108-00002479d605","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6ce567-5fd3-351e-6676-0000dee3b24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63eef917-18f9-1091-231b-00006fd365b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb0e432-47e1-a7ef-125c-000022eaf11f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'https://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab763ef7-2850-0d58-543a-0000bc5eef24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd2e8257-aa45-ab5b-482d-000048e68a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639e608-33aa-fcc6-28e2-0000ad44c812","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebef295-4af7-ecfb-c93d-000005fd22ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fc89e1-7ffb-4ca0-cf14-0000021c62b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a225761d-a155-ab90-47fa-0000d2e97f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc15ace-27a4-45a0-40c7-0000c370b9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'https://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ea09c1-d0da-f9c2-a558-0000f5060996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'https://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035af30d-f604-8e3e-b036-00004881dc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/uks.exe","pattern":"[url:value = 'https://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1c438c-7975-d046-05a7-0000d30ce7ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'http://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--946ffcdb-ef01-0dc6-206b-000010ae4d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'http://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eacb940-36aa-24e0-9228-00006e8b3232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/uks.exe","pattern":"[url:value = 'http://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1001c7-c8ee-048b-0d5f-0000643ae410","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd85ee37-5628-c2bf-32b2-0000887d1fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/bin.sh","pattern":"[url:value = 'http://27.37.102.150:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d5b1f7-0e93-ae00-6530-00004f9a991f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'http://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedb0a7c-bac1-063b-3d59-0000427337e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f57c1ce-bf34-99cb-5de3-000048a9dc23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'http://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25287666-debe-5f07-11f2-0000f4fc8493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'http://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976df81d-dbc5-2bdc-44ba-00000fee034a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'http://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd5094b-e014-c4d8-8c67-0000afc2ba36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e87b93","pattern":"[url:value = 'http://5.182.210.174/e87b93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff3ef1e-d8ab-909d-e2c6-00001f9c874e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a3cf9f","pattern":"[url:value = 'http://5.182.210.174/a3cf9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b50f18-c0bc-3993-77d5-0000dad0ecdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e9b28","pattern":"[url:value = 'http://5.182.210.174/6e9b28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7d3aba-4302-407e-b474-000037a2edef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c15cf0","pattern":"[url:value = 'http://5.182.210.174/c15cf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28e6b8f-acd7-1832-b296-0000921605ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/285a62","pattern":"[url:value = 'http://5.182.210.174/285a62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3803fe03-9be6-8914-db7e-0000e5066646","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/422255","pattern":"[url:value = 'http://5.182.210.174/422255']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f41b9b-9264-3b57-979c-000016d6efc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/539df1","pattern":"[url:value = 'http://5.182.210.174/539df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb1d74-3f22-2c2a-1681-00005454f245","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e77c7d","pattern":"[url:value = 'http://5.182.210.174/e77c7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7e7906-da88-08b6-fc92-0000b9bba797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b1f5e","pattern":"[url:value = 'http://5.182.210.174/3b1f5e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3e2eba-e5be-0acc-b9b8-0000f6d92aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b848da","pattern":"[url:value = 'http://5.182.210.174/b848da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e17cbe-feb7-b02b-220c-00006f3172d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a6fb8","pattern":"[url:value = 'http://5.182.210.174/1a6fb8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91241c83-2515-b8e6-aed3-0000cd71596a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c76cc8","pattern":"[url:value = 'http://5.182.210.174/c76cc8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0776e216-7b45-cfae-ca6e-000039f3df0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'https://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f05c54c-67d1-2581-bcbb-00004b11e601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.150/img/1.jpg","pattern":"[url:value = 'https://192.255.195.150/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1542814-ff6c-3737-f5ef-0000de027594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.173.9.104/img/2.jpg","pattern":"[url:value = 'https://107.173.9.104/img/2.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9d963c-f3f7-ae6a-75a8-000070a29ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'https://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b9d93d-d51a-8469-9839-00003a824697","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/img_190847.png","pattern":"[url:value = 'https://216.9.224.73/33/img_190847.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c62409-f9c6-b021-a43a-00007848f837","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.158/img/1.jpg","pattern":"[url:value = 'https://192.255.195.158/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d3e94e-9174-211d-9c01-00001e142e8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c613eac-27c5-a57b-e509-00005f64ab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a2c295-0bd2-2aa3-c0ff-0000ceba4868","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'https://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2bdc634-c76a-9622-333c-0000ff64b7b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'https://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdd753d-dffe-3126-a4c3-000072ef10d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'https://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65f0504-2160-7b34-1821-000075dc55e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'https://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde94570-a18c-3e18-1eb5-0000f45fccaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f032ce-939c-e899-4f2e-00003f8a583c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98afc71b-e695-999a-f9a0-000026d7f657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e107387-d735-c16d-3bdb-000009a972a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/bin.sh","pattern":"[url:value = 'http://42.230.25.51:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b05bae1-7244-ccdc-f8cf-000032164d9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/i","pattern":"[url:value = 'http://42.230.25.51:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e36a42-0c17-2df7-b07e-000021792ccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.104.58.65/yurumpmonday.png","pattern":"[url:value = 'http://193.104.58.65/yurumpmonday.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d10380-a5f0-493b-136e-0000cfbaef1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Mistakeful.pfb","pattern":"[url:value = 'http://185.29.9.108/Mistakeful.pfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c07fda5-f34b-3c57-5731-000014b3d00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin","pattern":"[url:value = 'http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c28593-d1a1-28f6-7368-000038bd8cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/nVgXuGSv49.bin","pattern":"[url:value = 'http://185.29.9.108/nVgXuGSv49.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae950140-2071-9dda-6070-00001d929e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/i","pattern":"[url:value = 'http://27.37.102.150:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b016c-aa1d-25ab-e48c-00003b729fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/nHxFirwKSyH79.bin","pattern":"[url:value = 'http://185.29.9.101/nHxFirwKSyH79.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee15b951-73ad-0b7a-283d-0000c1d2f0dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/pOuBKgVzyeBCT11.bin","pattern":"[url:value = 'http://185.29.9.101/pOuBKgVzyeBCT11.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2638337-f160-206b-858b-000011474d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/Standardpakke.toc","pattern":"[url:value = 'http://185.29.9.101/Standardpakke.toc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b0612c-24ff-5547-f154-000072a613e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/vSmLoKx110.bin","pattern":"[url:value = 'http://185.29.9.101/vSmLoKx110.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07b7e22-9892-2ee6-35f2-0000b9d42b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/MnuuOvukjaufYr227.bin","pattern":"[url:value = 'http://185.29.9.101/MnuuOvukjaufYr227.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffacd72-98dc-3537-8984-0000803f4b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://wp.ameyiando.com:8888/web/office365com.dat","pattern":"[url:value = 'http://wp.ameyiando.com:8888/web/office365com.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51652fa-d727-6a59-1a94-0000307c39fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab9b70c-266a-24ef-bffa-0000e4558fc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de284457-8577-7463-07b7-00003c255fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc86f1f-9bdd-2444-e1d3-000094d69cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec23381-89dd-f364-b0f6-00009580f24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f385cacc-6ded-95d6-baf6-0000c0046212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e455f7d-190c-c106-7150-000093ca4a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akocrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akocrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d38186-c680-3fed-1cf1-00002c8c08ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta","pattern":"[url:value = 'http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f038dbea-25e7-e5c6-5392-00001acdb462","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_050827.png","pattern":"[url:value = 'http://107.172.172.254/img/img_050827.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c1f0a-28c7-e57e-2f3e-00000663a2bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://verdiva.life/admin/MSI_PRO.png","pattern":"[url:value = 'https://verdiva.life/admin/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45e9804-6999-d083-82d4-0000c6349147","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c4271a-5f25-f8d1-4130-0000a30bd78d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'https://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cc0c3c-b9b7-b3aa-88b7-0000e760984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/bin.sh","pattern":"[url:value = 'http://123.5.204.221:40942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0d135a-ea9e-4a1d-649c-00008a03d33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/i","pattern":"[url:value = 'http://123.5.204.221:40942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b734057-5845-b053-f765-0000a4f01203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.143.36/img/1.jpg","pattern":"[url:value = 'http://107.173.143.36/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef0d699-dedf-0ecd-0104-00006c6b56fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin","pattern":"[url:value = 'https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e31a98-e202-b860-9960-00008e58e58d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ubua.duckdns.org/update.exe","pattern":"[url:value = 'https://ubua.duckdns.org/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0376fc8-761e-05b2-9e0e-0000311250f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f3f5541-bade-5785-8fda-0000f484265a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86","pattern":"[url:value = 'http://36.255.97.21/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd09cb82-fe2c-cd90-8e76-000047153cdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-3.2-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-3.2-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f501b041-954b-59fe-b41a-000016ec3c82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm7","pattern":"[url:value = 'http://62.84.172.106/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c41dca-46cf-67fc-adb4-00000b2b3c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-8.6-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-8.6-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c6d14a-712e-175b-9228-0000635fde87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86","pattern":"[url:value = 'http://62.84.172.106/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a1876d-4611-ddd9-2b49-0000616a8097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_64","pattern":"[url:value = 'http://64.118.132.61/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50ffd0-5f3e-a6b6-67fe-000081b0dc42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/aarch64","pattern":"[url:value = 'http://64.118.132.61/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beeb5dcf-5c63-77fd-4ef1-000056488c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm","pattern":"[url:value = 'http://64.118.132.61/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61da7efe-07d7-b923-2c19-00009c9674a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm7","pattern":"[url:value = 'http://64.118.132.61/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5d61d-09b4-3473-9a02-00008ce1503b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_32","pattern":"[url:value = 'http://64.118.132.61/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b33eac3-f8a8-7d73-b634-00007cde179c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86","pattern":"[url:value = 'http://64.118.132.61/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f281de3-31fd-612a-9011-0000950befde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02aa052f-1d6c-396d-d821-00008c13fac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug.dbg","pattern":"[url:value = 'http://94.154.43.97/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3fb6315-2ee4-3598-9d61-00008a243776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86","pattern":"[url:value = 'http://94.154.43.97/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985f100-6932-5ce0-f2d0-00006403e284","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm6","pattern":"[url:value = 'http://94.154.43.97/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d6effc-dcbb-8224-4be8-0000fefe574e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/m68k","pattern":"[url:value = 'http://94.154.43.97/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5ba787-477e-387f-f22d-00000df3eab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6218904d-3720-c0b3-e06f-0000ee194913","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm7","pattern":"[url:value = 'http://36.255.97.21/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9aee2a5-faed-7cdb-4880-000076e3c55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-7.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-7.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8968dd9-deed-ef12-2269-0000e16f9bce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/Sakura.sh","pattern":"[url:value = 'http://23.251.34.31/Sakura.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9261dd1-b6f7-29bf-5a1c-0000555cf3a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/bins.sh","pattern":"[url:value = 'http://64.118.132.61/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbad84c-90fb-1727-9c57-0000efa32440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/ohshit.sh","pattern":"[url:value = 'http://31.77.227.111/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a461d7-d4b7-7959-a8ae-0000d1ed5bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/jaws","pattern":"[url:value = 'http://36.255.97.21/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d2bf2b-39a6-8a7f-0225-0000cbeeed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/d","pattern":"[url:value = 'http://62.84.172.106/d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e1975a-b948-22fd-fa19-00007c502098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/bins.sh","pattern":"[url:value = 'http://176.65.139.199/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da49dc-3ea4-d1c6-af54-00003758468b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/0x83911d24Fx.sh","pattern":"[url:value = 'http://176.65.139.199/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532284a9-0914-d6cf-a562-0000a8503fb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/1.sh","pattern":"[url:value = 'http://181.214.136.12/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04acb624-3fa7-fa29-1bec-0000a6cd4d6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/t","pattern":"[url:value = 'http://93.114.194.171/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a350e9ab-bcba-bb4b-9d51-0000c58ceedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cc947f-b7b8-f61a-a27a-00002c24ab02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm","pattern":"[url:value = 'http://36.255.97.21/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1142373-b2d1-5b26-5b5f-000006b2301a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_x86","pattern":"[url:value = 'http://36.255.97.21/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a32d0-77b4-45e4-c8b0-000002868c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mips","pattern":"[url:value = 'http://93.114.194.171/d/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf84786-db87-591b-8e4b-00001d9081eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.199/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99587d38-c482-92e8-8162-0000212f2f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.ppc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad7ecf-7f76-250e-60f3-0000775e1f56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_i686","pattern":"[url:value = 'http://36.255.97.21/main_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee0ace4-6683-ef22-fbc1-0000f8252cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_spc","pattern":"[url:value = 'http://36.255.97.21/main_spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1780e14-6e2e-c900-3a55-00002f049a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9920fbe9-662c-a65e-1e28-00009e63b6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee27cb7f-1a9e-60c4-a400-000026dfd1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d53d1e6-d8ca-8701-67c1-000033581d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86_64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--444f8b97-085c-b63e-d51c-0000323ef61e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm5","pattern":"[url:value = 'http://36.255.97.21/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb36ce-c584-44a8-f8cf-0000d18354aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mpsl","pattern":"[url:value = 'http://36.255.97.21/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a374b978-adaa-2a3d-26ff-0000ccfbdc31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arc","pattern":"[url:value = 'http://36.255.97.21/main_arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3215c4d1-930a-06a0-3506-0000ba76ec3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_m68k","pattern":"[url:value = 'http://36.255.97.21/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd46da2d-7745-462d-cc02-0000208b59f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm6","pattern":"[url:value = 'http://36.255.97.21/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f4f0ea-e6c3-8a7d-f6ae-0000fe6fc799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_sh4","pattern":"[url:value = 'http://36.255.97.21/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f564bff5-befa-814d-5b48-00006efbe356","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sparc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3504e23b-a58f-caa5-fcf9-0000b76d1a9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2132e699-3001-2f8d-07e1-0000c647c31a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3db999-f506-db1a-4aac-00006bdb9f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecec1b88-de0c-a9fb-2644-00001bda6ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00826d7e-6065-c85a-9459-000079fcf712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c02313-5b0e-1001-b7e4-0000cfdbed70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c318941f-2021-b041-cfc1-0000e54d7668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7673e515-57ab-f9b8-0a27-0000049e036c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.199/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa41eabb-3abc-2397-45f4-000098373e95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm7","pattern":"[url:value = 'http://36.255.97.21/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d156fc35-5e73-d763-8ac2-0000ecd73874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-i.p-s.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-i.p-s.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7721e546-e85a-2fcf-50b1-0000ef01a35c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-4.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-4.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8d170a-ea09-9a70-4d72-00006f6bbbfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd24d11-026e-ed17-11a5-0000c4980ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.m68k","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ea4cf6-fde0-71ad-cdf2-0000592c4117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3786637b-8208-1735-3f8e-0000e6d9dc59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm7","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5fd1c3-cbe4-5bdb-c27d-00000468d5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd893234-a3e4-4b41-d52c-0000ae0067da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/p-p.c-.Sakura","pattern":"[url:value = 'http://23.251.34.31/p-p.c-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8a5482-f757-c6d8-a917-0000c57d7893","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-6.8-k.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-6.8-k.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeaaa5d1-842d-2d69-47ec-00009d4e181d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0029aa53-8f70-6687-25f7-00008cd61948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4bb3dc-e325-e5c4-bd7c-00005e03ec97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-p.s-l.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-p.s-l.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9bef7e-e828-df10-d419-00001422a506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/i-5.8-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/i-5.8-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5132fbfa-a560-d1f1-fd06-000073bada0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0a9f6f-036a-877c-3ee4-0000a1f1b694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sh4","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9880257-5386-96da-3f46-00004cd014d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm5","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e39f007-444f-e507-a5ff-0000ba803ae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mips","pattern":"[url:value = 'http://36.255.97.21/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68ad6fd-5ef7-c968-ff29-00009365ad3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562cbf0e-7119-e7fd-6279-0000af6db666","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mpsl","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca612bd-c749-ec7b-7043-00007eb15e6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_ppc","pattern":"[url:value = 'http://36.255.97.21/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2cdfba-731e-e680-37b4-000008c78b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3fe79c7-6408-1ee9-bb03-0000c46ed82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408153ed-b9ca-de46-966d-00005e65bb3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm6","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724557cb-7192-62e7-e12d-00009ac042f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/s-h.4-.Sakura","pattern":"[url:value = 'http://23.251.34.31/s-h.4-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e398f419-ceba-ce5e-4f3a-00006985e27d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mpsl","pattern":"[url:value = 'http://93.114.194.171/d/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44131cd0-ac2d-9df0-e1ca-00001b366c59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8be5d8-8753-bded-1ea7-00002e8f7c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-5.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-5.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356af70f-dc24-ba7d-d2a3-000009b0fd9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.i686","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1ec361-bc32-22c4-a082-0000a7bb5dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.spc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550ccc5d-2c01-aa0f-33f4-0000feeb2c71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug_main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccb8182-2cbe-5d94-a2a7-000038e938ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19bf91e-3086-3b6d-d335-0000406ddb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arc","pattern":"[url:value = 'http://94.154.43.97/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4952db-6c65-64a5-20aa-0000f2275903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/ppc","pattern":"[url:value = 'http://94.154.43.97/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1bb08c-725f-3856-31cd-000072f9c0f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/sh4","pattern":"[url:value = 'http://94.154.43.97/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafadb2a-f1aa-596e-0ef4-0000fe088194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mips","pattern":"[url:value = 'http://94.154.43.97/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82c196-b8ba-51a6-7370-0000dcbf85e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm7","pattern":"[url:value = 'http://94.154.43.97/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db2f918-20eb-04d0-06e9-000006523faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64nosl","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5623d419-26a3-9d1e-6397-0000a0b2ac6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm","pattern":"[url:value = 'http://94.154.43.97/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08ca0ba-1f65-6df1-e903-000076b64d6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm5","pattern":"[url:value = 'http://94.154.43.97/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0fec82-8763-4970-dd74-000074b32bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/spc","pattern":"[url:value = 'http://94.154.43.97/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8971b02d-a67a-e78e-a12e-000007247f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc5cce-7af1-af65-2680-0000f62c72dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa7c9a-5a1c-fc3c-f0b6-0000b17b04eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0e9a07-0c6b-8f86-c6b9-00009d2f1c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe7680bb-60aa-84e8-50d0-0000bf9818e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659b3b4b-bea1-3d38-b6e6-0000d3d6821e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c9d91c-8289-fca3-ee4f-000053081be8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48290a85-892a-ee38-1490-0000abd5ec6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a49908e-3850-5808-645d-0000619c0040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee4ecd-25f4-eab9-31f5-00004449ed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/kk2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f86b9d-1c00-007c-2887-000034d2a65e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/bin.sh","pattern":"[url:value = 'http://213.66.220.87:50871/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0057b9bd-ce90-1f4d-79ea-0000f9f8f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/i","pattern":"[url:value = 'http://196.189.98.110:33070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b6690b-92c1-70e5-ff8a-00006e1e6cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/i","pattern":"[url:value = 'http://182.121.106.64:52025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43b7cc0-891d-7ef1-6985-000057580ce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/exploit.sh","pattern":"[url:value = 'http://voltagec2.tech/exploit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94c6ad0-a2b3-e662-a83b-00009987fee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/bin.sh","pattern":"[url:value = 'http://27.21.31.81:59239/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1885cf-7d8f-ea46-4082-00003b1d6094","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/bin.sh","pattern":"[url:value = 'http://113.233.65.130:37441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25674c8-18a6-5fc7-abc5-0000a291caa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm","pattern":"[url:value = 'http://voltagec2.tech/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cdbeec-3ff4-9478-46d3-0000cb1d5187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.52.247.235:47637/i","pattern":"[url:value = 'http://37.52.247.235:47637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b933b9-4049-d056-2356-0000782fee78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.50.235:56719/i","pattern":"[url:value = 'http://115.63.50.235:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74fb5c99-ca2e-782c-805f-00003ad5ff69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/bin.sh","pattern":"[url:value = 'http://140.237.36.213:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5539eee7-762e-fcdd-4e97-0000c723d5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/bin.sh","pattern":"[url:value = 'http://119.116.39.158:45878/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1057b5db-15ee-75fa-a278-0000191701c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/i","pattern":"[url:value = 'http://110.37.106.220:47631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050b58cc-f53e-d5ce-8c12-00008973245b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/i","pattern":"[url:value = 'http://125.41.226.101:43998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c678046-947a-5914-f758-00006834d810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/i","pattern":"[url:value = 'http://42.54.158.77:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2011b9e3-9615-3b82-4efa-000000651e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/i","pattern":"[url:value = 'http://213.66.220.87:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228c8606-ef7c-c3e7-8e23-0000792cc9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/K1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/K1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ee3726-697a-267d-ae0c-00001f0310c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.40.158.110:41707/i","pattern":"[url:value = 'http://125.40.158.110:41707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a6c733-ec11-e747-9e94-000069555961","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bacbe6-36a4-0069-bff6-00005aa3bd52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.6.238:41787/bin.sh","pattern":"[url:value = 'http://140.237.6.238:41787/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6b592a-9899-7641-aec4-000070b5d8af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/i","pattern":"[url:value = 'http://115.56.159.152:47624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68012ea4-64db-503d-cbfc-0000560789c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/i","pattern":"[url:value = 'http://125.43.44.201:48800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6e105d-8008-961c-b253-000070daa63c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/sh4","pattern":"[url:value = 'http://voltagec2.tech/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c566e2-1d0e-fd04-5cdf-000086b9bbf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm6","pattern":"[url:value = 'http://voltagec2.tech/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3af1b9-8ed6-951e-48b6-0000f55289d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/bin.sh","pattern":"[url:value = 'http://210.208.106.68:36906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61c3aad-b0a2-be02-947e-0000147e094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.236.61:47227/i","pattern":"[url:value = 'http://175.165.236.61:47227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af22df9e-8d4e-cbd8-ddac-0000d03b48cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/bin.sh","pattern":"[url:value = 'http://123.8.90.59:40206/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553b6ac6-cdf5-efea-35a6-00004f4dc500","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.214:33968/i","pattern":"[url:value = 'http://182.126.95.214:33968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c151982f-71c0-3721-d88f-0000629325c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/bin.sh","pattern":"[url:value = 'http://115.55.246.222:57542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268590dd-8fe6-943e-6a0a-00009db41e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/i","pattern":"[url:value = 'http://27.215.44.220:42289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3a50a4-a906-3c76-3db6-000056b0340b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/bin.sh","pattern":"[url:value = 'http://125.43.44.201:48800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11cc3758-6dde-411a-391f-0000940c1418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm5","pattern":"[url:value = 'http://voltagec2.tech/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adeaca6-a8f8-79f2-ffc5-00004a5a68c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/bin.sh","pattern":"[url:value = 'http://119.189.160.169:47495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb88cd7-8c03-7c77-390e-00002e3c8a8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/bin.sh","pattern":"[url:value = 'http://1.20.91.236:53593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1dc98c-eb33-9e5a-c4e3-00006567a768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/i","pattern":"[url:value = 'http://210.208.110.172:59880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1691f2de-9536-2a59-5940-0000d2e37d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/i","pattern":"[url:value = 'http://42.176.120.191:54769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c130d3c-19a2-5803-d262-0000e81766a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/bin.sh","pattern":"[url:value = 'http://124.92.80.153:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2669e59b-37d9-fe5a-baa9-00001257cccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/i","pattern":"[url:value = 'http://119.116.39.158:45878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d218e0e-4e0b-80e9-0181-00001781cd12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/i","pattern":"[url:value = 'http://221.1.226.175:38386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7211825-de3b-1b39-1495-000004824905","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/i","pattern":"[url:value = 'http://221.202.17.138:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbb363a-9463-8376-6fc3-00000825de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/i","pattern":"[url:value = 'http://113.233.65.130:37441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564626d9-3bac-3957-7cd6-00002a4f2cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/i","pattern":"[url:value = 'http://42.224.175.231:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcd748-92e2-abda-428c-0000f08d74e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/i","pattern":"[url:value = 'http://222.127.220.233:54104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01c48b9-9389-4604-7bba-000012581983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/bin.sh","pattern":"[url:value = 'http://182.121.106.64:52025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15bd153-df0d-239c-4a21-0000fe16a994","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.214.37:48901/i","pattern":"[url:value = 'http://222.137.214.37:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f9578-0f6a-fbc5-69e8-0000c2128c94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.66.105:43207/i","pattern":"[url:value = 'http://42.180.66.105:43207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f875f76d-afd7-e8bb-9d28-0000cfebefec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/bin.sh","pattern":"[url:value = 'http://120.84.213.21:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fe5efd-459a-2e4e-54e9-000037570a28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/i","pattern":"[url:value = 'http://42.230.40.119:58107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c646ef3-8567-10b8-37c7-0000f2556b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.180.159:41148/i","pattern":"[url:value = 'http://182.121.180.159:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93340659-f6c1-31a9-7c05-0000e0f50331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/i","pattern":"[url:value = 'http://175.167.85.100:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9d476a-2319-11ca-becf-000080b03dad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/i","pattern":"[url:value = 'http://222.127.154.48:44547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33995c16-3589-9376-1f94-00007300a3e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.14:47408/i","pattern":"[url:value = 'http://125.44.219.14:47408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453258ea-7ee1-8417-94f3-0000eab69641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7fd00e-b29f-cc29-a65c-0000bf6ac12b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_64","pattern":"[url:value = 'http://64.118.132.61/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44829d46-ed33-565c-b703-00004738a2c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/duza","pattern":"[url:value = 'http://193.23.118.161/duza']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f7b297-eb80-fb9f-5e8e-0000f90040ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86","pattern":"[url:value = 'http://64.118.132.61/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5541a0a-9407-094e-5475-000025caafab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.52.185:33904/i","pattern":"[url:value = 'http://42.237.52.185:33904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0133601c-11f1-eb93-90a6-00003b67150a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/bin.sh","pattern":"[url:value = 'http://115.56.159.152:47624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269ca263-8566-816b-3fcf-0000db6f31f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.232:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c3ebcf-d2f1-6a26-6346-0000d1622d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/i","pattern":"[url:value = 'http://210.208.106.68:36906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c524c5a4-14ce-02b6-8ffd-0000a089770d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.238.30:45449/bin.sh","pattern":"[url:value = 'http://112.198.238.30:45449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95720121-e5be-b69a-3421-00006ae948bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/m68k","pattern":"[url:value = 'http://64.118.132.61/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39197310-e6e9-38e7-4463-000088296412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3befa047-e4dd-e3d6-1b84-00001f119dd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/i","pattern":"[url:value = 'http://123.8.90.59:40206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd87480d-5df4-00a4-a89e-0000b7d205be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/bin.sh","pattern":"[url:value = 'http://210.208.110.147:33487/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3469a2a-d4eb-a82f-450a-0000d5bd001e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/i","pattern":"[url:value = 'http://119.179.254.223:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39963611-a7e5-ebc7-8a91-000079e22bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/i","pattern":"[url:value = 'http://27.21.31.81:59239/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cda29b1-5f42-a0e5-7002-000012aa7594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://86.98.154.146:19091/i","pattern":"[url:value = 'http://86.98.154.146:19091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c9a8a-dfd5-d90f-e42d-0000a1a2d596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/bin.sh","pattern":"[url:value = 'http://42.230.40.119:58107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec4cb60-fb07-d3f1-92f9-000008a686dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/i","pattern":"[url:value = 'http://210.208.111.234:49323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2213f1b-3fb8-b970-d27e-0000f0b233bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.114.109:46437/i","pattern":"[url:value = 'http://115.49.114.109:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9cff28-14c4-870a-5acf-0000a8b57006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/i","pattern":"[url:value = 'http://219.154.181.58:50132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a22ca06-fa3e-efca-804c-0000148e4716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.62.97:34952/bin.sh","pattern":"[url:value = 'http://115.203.62.97:34952/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b37db2-d150-9457-3d7a-0000fa558af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/i586","pattern":"[url:value = 'http://205.237.110.232/tvt/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c209735-0ff9-c778-e937-0000d3b85eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.146.164:54323/i","pattern":"[url:value = 'http://61.52.146.164:54323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d3e39a-f49f-a4db-fe18-00006e7b5b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/bin.sh","pattern":"[url:value = 'http://221.202.17.138:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a513dc3a-b65e-1560-5035-000074b9ee80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/i","pattern":"[url:value = 'http://113.230.81.126:50462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c38b62-04d9-0f8e-0d4e-0000653f88b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/bin.sh","pattern":"[url:value = 'http://182.113.201.103:43353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c9e380-759e-2bb8-6f38-000082a8849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:52311/i","pattern":"[url:value = 'http://120.28.194.160:52311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1eb3c0f-fcb3-718c-00e6-0000bb01403d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.138.83:40373/bin.sh","pattern":"[url:value = 'http://112.93.138.83:40373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff05c94-f57a-e2b3-4f8e-0000a5dfb539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/bin.sh","pattern":"[url:value = 'http://175.167.85.100:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f8a84a-7bd1-e656-bf7f-00005cc301c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.30.36:60566/i","pattern":"[url:value = 'http://123.12.30.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a96d6c-5312-3f13-e5d9-0000cae279fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/bin.sh","pattern":"[url:value = 'http://222.127.220.233:54104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78af750e-6da9-7410-f94a-0000eac95b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/bin.sh","pattern":"[url:value = 'http://123.14.193.241:34414/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aab946e-18df-b6ac-6b42-0000e21696f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.216.110:54566/bin.sh","pattern":"[url:value = 'http://113.228.216.110:54566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa14f7b-ae58-d1e6-dba0-00007ae20231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.197.66:51494/i","pattern":"[url:value = 'http://61.137.197.66:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e80354-66ee-3711-f500-00001a3ffa8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/bin.sh","pattern":"[url:value = 'http://125.41.226.101:43998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86c903e-fd63-539b-dca9-0000efc62a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_32","pattern":"[url:value = 'http://voltagec2.tech/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b4df57-20cd-54e3-d4c2-00005729d36d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/bin.sh","pattern":"[url:value = 'http://210.208.111.100:38107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7748cfe7-a723-3c74-1abe-00006cbe81df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/bin.sh","pattern":"[url:value = 'http://196.189.98.110:33070/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d408dcec-3b8e-c181-d630-000077d86e9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/i","pattern":"[url:value = 'http://27.204.233.111:38853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ecaea-5502-b648-a73c-0000cb1c6321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/bin.sh","pattern":"[url:value = 'http://42.54.158.77:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef56a46e-8bca-7adb-015a-0000fe5c2e47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.40.36:42435/bin.sh","pattern":"[url:value = 'http://115.56.40.36:42435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b45b79-8905-d7ee-758d-00003a15e58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.131.65:54677/i","pattern":"[url:value = 'http://182.120.131.65:54677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a22d61-087f-ac14-68f9-0000a5917cd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc440","pattern":"[url:value = 'http://voltagec2.tech/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0654293c-3f92-6aef-b1e7-0000f147535a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/i","pattern":"[url:value = 'http://119.166.194.8:35798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a1b6cd-7c87-4945-c869-00007e4fda54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/bin.sh","pattern":"[url:value = 'http://42.86.172.171:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3cf20a-17f5-98ae-e5b5-0000f0043fca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc","pattern":"[url:value = 'http://voltagec2.tech/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfc2a32-4dae-a3aa-fb8f-000008f90662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.42.71.239:58276/i","pattern":"[url:value = 'http://115.42.71.239:58276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7e8757-c7ad-4562-7a2f-00005efa2f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/bin.sh","pattern":"[url:value = 'http://42.235.75.164:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96566111-e3b3-faa0-55ba-0000177c2258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.80.60.21:60792/i","pattern":"[url:value = 'http://39.80.60.21:60792/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f24ec9-7072-08fe-7155-000057411953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:49323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fc73e6-adff-2216-65fd-0000e9007d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/i","pattern":"[url:value = 'http://115.55.246.222:57542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b7347-1c8b-c07a-2d00-00000fd43d18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/i","pattern":"[url:value = 'http://110.39.249.174:41741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664350df-14e4-718b-bf40-000027cd7abb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/i","pattern":"[url:value = 'http://27.215.126.58:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ffb1ce-a4ee-0c5b-1636-0000bf9b8e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.215.125:39910/i","pattern":"[url:value = 'http://120.84.215.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a6be4e-3bac-6d1f-2b27-0000cb816038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/i","pattern":"[url:value = 'http://42.235.174.78:56482/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f49da18-d483-0e5c-601a-000092946398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/i","pattern":"[url:value = 'http://210.208.110.147:33487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b9ec94-b34b-1e77-bf6e-00004e1ae2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.78.13:52046/i","pattern":"[url:value = 'http://175.173.78.13:52046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f802dd-53a1-e76e-8b0b-0000f077fb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/bin.sh","pattern":"[url:value = 'http://115.148.236.155:60439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9480f01c-3b6f-dc1f-c4df-0000184e7db3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/i","pattern":"[url:value = 'http://115.148.236.155:60439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd36c29-ac1f-67dd-19b1-000015789ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ceb2a5d-2b37-264a-a73d-0000c8a10ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_64","pattern":"[url:value = 'http://voltagec2.tech/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ff20a-7e7a-1d9c-888e-00001fd12fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/i","pattern":"[url:value = 'http://115.50.150.5:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd0327-bfa3-ce0d-649d-00001a3be885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/bin.sh","pattern":"[url:value = 'http://119.109.140.49:40757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8cf33e-315d-87dc-4f6f-0000011cf02d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mpsl","pattern":"[url:value = 'http://64.118.132.61/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3284e67-5f51-e709-5cc0-0000e2a15299","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm5","pattern":"[url:value = 'http://64.118.132.61/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9b0089-1d8b-4773-0eec-00007d4f2f52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/i","pattern":"[url:value = 'http://219.157.52.254:39042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22eb73-7360-32ae-3f06-0000ca2bf8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a13f3a6-9613-517e-8aff-000092ac9786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/jaws","pattern":"[url:value = 'http://api.mineblack.lol/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3012f270-c705-9597-4aa0-000075b4dfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/i","pattern":"[url:value = 'http://125.110.61.156:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6622aed1-5227-7371-f3ec-00009dd9ca4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d2966a-0628-3f8b-ef1b-0000fef0953a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.198.5:48196/i","pattern":"[url:value = 'http://182.114.198.5:48196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba4cc8-7577-879b-408a-00001cb2d8e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mips","pattern":"[url:value = 'http://voltagec2.tech/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0cafcc-f8c7-7b2d-8af3-00004ceac67b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.149.19.3:33747/bin.sh","pattern":"[url:value = 'http://116.149.19.3:33747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad731f5-2483-cccc-a5aa-00009993b42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/bin.sh","pattern":"[url:value = 'http://110.39.249.174:41741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e365e46c-cd11-2a46-5a07-0000b271d436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/bin.sh","pattern":"[url:value = 'http://222.127.154.48:44547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d853336-ad3d-4d34-76ad-0000bd29ce2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/bin.sh","pattern":"[url:value = 'http://221.1.226.175:38386/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f917610e-b866-9c36-46dd-000001ddb77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/sh4","pattern":"[url:value = 'http://64.118.132.61/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e688a01-1f9b-5204-5c97-000077b1b6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mpsl","pattern":"[url:value = 'http://voltagec2.tech/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ff7b2d-e293-7433-4fc1-0000252adf55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_32","pattern":"[url:value = 'http://voltagec2.tech/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5000b-1801-ad7f-dada-00002843bccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/bin.sh","pattern":"[url:value = 'http://119.179.254.223:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6e1165-f0ff-578a-a613-000043b923a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/aarch64","pattern":"[url:value = 'http://64.118.132.61/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8ab5a9-367f-7a70-4007-0000b600139f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/i","pattern":"[url:value = 'http://182.113.201.103:43353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442f059b-04bc-5def-efbb-0000d396dbe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm","pattern":"[url:value = 'http://64.118.132.61/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8bec14-9f2d-07ba-4312-000067f8a8f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/bin.sh","pattern":"[url:value = 'http://136.60.32.162:36863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f895a9-5f51-9f9d-fcc2-00009d8f27b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/bin.sh","pattern":"[url:value = 'http://219.157.52.254:39042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c242ab-27da-94a4-a9c7-0000967e79b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.195.182:57009/bin.sh","pattern":"[url:value = 'http://182.114.195.182:57009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a21d-5342-6786-a2e8-00008edbab6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.86:37512/i","pattern":"[url:value = 'http://115.48.149.86:37512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fb9466-1e66-572c-a07d-0000876e9610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/bin.sh","pattern":"[url:value = 'http://219.154.181.58:50132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a53c21-0d8d-8812-ee9f-000018b647d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc440","pattern":"[url:value = 'http://64.118.132.61/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cf4569-424e-aa05-c3ac-000035a5d1e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/bin.sh","pattern":"[url:value = 'http://125.110.61.156:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e933a64-e3ee-d133-48e2-0000f7073aab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/bin.sh","pattern":"[url:value = 'http://27.215.44.220:42289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfb37ce-a4d2-6d16-cf41-0000d52f757f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://43.252.159.78:57590/i","pattern":"[url:value = 'http://43.252.159.78:57590/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1292aebe-d65d-bccb-a2e4-00001533f5a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/bin.sh","pattern":"[url:value = 'http://119.166.194.8:35798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af54194-28c7-1c59-5f08-00002ad92d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/bin.sh","pattern":"[url:value = 'http://110.187.193.166:37676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2b67d0-4ba4-293a-6c8d-0000ffff7471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/bins.sh","pattern":"[url:value = 'http://voltagec2.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278ec3c4-09b1-c7eb-b7a7-0000880751bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86","pattern":"[url:value = 'http://voltagec2.tech/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5d85d1-45ef-b3c0-882e-00002b135b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/aarch64","pattern":"[url:value = 'http://voltagec2.tech/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ea5f2f-81ef-b1c6-38d9-0000ba9b0ea6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm7","pattern":"[url:value = 'http://voltagec2.tech/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c357e4-1ebb-eec3-099b-0000ad0a65b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/aarch64","pattern":"[url:value = 'http://voltagec2.tech/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa8dd8c-dedd-72bc-88ce-0000f0c2370d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.43.20:36177/i","pattern":"[url:value = 'http://123.14.43.20:36177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7e9908-5a06-54c1-9ea4-0000ed5b7912","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.x86","pattern":"[url:value = 'http://api.mineblack.lol/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab939a43-c351-7050-3fdc-00006402d6f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/mipsel","pattern":"[url:value = 'http://205.237.110.232/tvt/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e35f7-51d6-b9f8-19db-00006a1f9e67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mips","pattern":"[url:value = 'http://64.118.132.61/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c78c14e-4635-1cc5-6366-0000024dfa29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_64","pattern":"[url:value = 'http://voltagec2.tech/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211fdd-a7f8-8ab7-98bc-0000f014fd77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm6","pattern":"[url:value = 'http://64.118.132.61/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e04f32-c661-813b-8367-00000472c5f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.192.208:40793/i","pattern":"[url:value = 'http://219.155.192.208:40793/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a2b4c1-8263-7de6-ef39-0000dc6a1076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/i","pattern":"[url:value = 'http://42.4.25.20:34409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78dc129-c6ea-a973-1664-0000820221b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm","pattern":"[url:value = 'http://voltagec2.tech/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02557625-14ea-343d-469c-0000a894baac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86","pattern":"[url:value = 'http://voltagec2.tech/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--285eeb8c-85a2-820b-ed26-00002d00f1b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/i","pattern":"[url:value = 'http://42.52.204.44:32770/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c476f817-a074-4dff-3d1b-0000881c4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/bin.sh","pattern":"[url:value = 'http://42.4.25.20:34409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc77473b-0313-efc0-8bb5-0000ad11727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/bin.sh","pattern":"[url:value = 'http://27.204.233.111:38853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6796781e-f3be-6d53-c3b5-00001c440e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/m68k","pattern":"[url:value = 'http://voltagec2.tech/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96b817e-b306-8499-51ce-000052e11187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_32","pattern":"[url:value = 'http://64.118.132.61/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d262f4b-b274-c20b-93e0-000048a89a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm7","pattern":"[url:value = 'http://64.118.132.61/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d5b28b5-ac9f-7988-c4ed-000096075fee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.arm7","pattern":"[url:value = 'http://api.mineblack.lol/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c458359-bea1-6eb4-5cd4-000081032e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc","pattern":"[url:value = 'http://64.118.132.61/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc25674-8abb-3df1-f044-00003e05dc93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm7","pattern":"[url:value = 'http://voltagec2.tech/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e105ba2d-86e2-2ed2-0941-0000aaa32241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://121.5.26.199:9696/linux","pattern":"[url:value = 'http://121.5.26.199:9696/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff95c4b-ede4-e3bd-284c-00005ad67fa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/tuess/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/tuess/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6c70ca-62a4-ec2f-5fba-0000037502d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://seniorsushi.com/PPK/RAWFILES.exe","pattern":"[url:value = 'https://seniorsushi.com/PPK/RAWFILES.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393701fa-c88d-b894-accd-0000ed8327df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Volcano9.exe","pattern":"[url:value = 'https://rcf.co.mz/Volcano9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49aae566-2539-376b-2b26-0000ad26bf2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/bin.sh","pattern":"[url:value = 'http://196.189.35.172:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebf63c4-2696-926b-c88d-000077deed15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/i","pattern":"[url:value = 'http://196.189.35.172:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc00dd35-2d48-67c5-7bf9-0000e240d94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/bin.sh","pattern":"[url:value = 'http://78.178.118.193:52357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25586b37-6965-7d36-9014-000036ebdd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/bin.sh","pattern":"[url:value = 'http://182.121.179.166:53602/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c772fa8-f898-c7eb-7bba-0000ff6095a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/sh4","pattern":"[url:value = 'http://176.65.139.196/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2d9d88-c7bd-d154-9912-00009a60a77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmpsl","pattern":"[url:value = 'http://176.65.139.196/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bf6573-96d1-a4e8-b6af-0000e195a23f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/px86","pattern":"[url:value = 'http://176.65.139.196/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d36f97-bb60-4a1b-6588-0000f1951fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pm68k","pattern":"[url:value = 'http://176.65.139.196/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5925cdff-6f3a-2af8-c7f1-00007fbe0c5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/ppc","pattern":"[url:value = 'http://176.65.139.196/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7497fc31-0a17-1a38-2769-000007bd622b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/x86","pattern":"[url:value = 'http://176.65.139.196/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0d54bd-280e-eadf-4795-00009996cc4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pppc","pattern":"[url:value = 'http://176.65.139.196/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5fb6ea-b62b-91f3-ffee-0000194855bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/psh4","pattern":"[url:value = 'http://176.65.139.196/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd80716b-a163-8b32-1d32-00006b68aa25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm6","pattern":"[url:value = 'http://176.65.139.196/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c83aad-76ff-ff8a-04f3-000095c01f71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/px86","pattern":"[url:value = 'http://176.65.139.196/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c8e71b-4cb6-4491-3285-0000608526c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pm68k","pattern":"[url:value = 'http://176.65.139.196/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9cc971-77dc-0907-6412-000042c4f46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm7","pattern":"[url:value = 'http://176.65.139.196/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eff5b41-ddb4-4d72-310b-0000f163c935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmips","pattern":"[url:value = 'http://176.65.139.196/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267d27f-00ab-4cb9-24c8-0000cb033927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm","pattern":"[url:value = 'http://176.65.139.196/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce41a38-4dd5-fc5b-7c8a-0000c9442db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm","pattern":"[url:value = 'http://176.65.139.196/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4828f4-bbb1-0c70-aa60-000063e1f976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm5","pattern":"[url:value = 'http://176.65.139.196/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67297807-d07f-1711-cc2e-0000546d38de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/kla.sh","pattern":"[url:value = 'http://176.65.139.196/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8346ac84-2000-44a6-88fb-00008f47e131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/kla.sh","pattern":"[url:value = 'http://176.65.139.196/bins/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28e934-1a50-a34c-746f-00006d1de8f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/psh4","pattern":"[url:value = 'http://176.65.139.196/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31dc7ead-a381-ee0f-3ee3-00001b0f412b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/sh4","pattern":"[url:value = 'http://176.65.139.196/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35362690-098e-393f-2f12-00000501ebd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm6","pattern":"[url:value = 'http://176.65.139.196/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1267b2-976f-107f-646d-0000eba9e352","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/m68k","pattern":"[url:value = 'http://176.65.139.196/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa361504-2e87-3f11-b92d-00000b709e55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.196/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914f4b3d-c849-3668-965a-00002d2bf933","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm","pattern":"[url:value = 'http://176.65.139.196/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec95ad-fc2c-afc4-b9c9-0000805c5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mpsl","pattern":"[url:value = 'http://176.65.139.196/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--324649d8-bdaa-e890-636b-0000c9e831fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm7","pattern":"[url:value = 'http://176.65.139.196/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42311606-3794-08fc-a2af-0000bdbd8cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm7","pattern":"[url:value = 'http://176.65.139.196/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8741fd-4b2f-7a7c-0694-0000d3d4cd40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm7","pattern":"[url:value = 'http://176.65.139.196/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3f772a-6c7e-f0cc-76ea-000017b44438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm5","pattern":"[url:value = 'http://176.65.139.196/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693cad34-d871-99af-6254-0000e3d2b6a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/x86","pattern":"[url:value = 'http://176.65.139.196/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da65386c-6a4b-0280-6810-00009ffc5e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/m68k","pattern":"[url:value = 'http://176.65.139.196/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9bf9e7-2680-ddbc-3636-0000fa78930f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm6","pattern":"[url:value = 'http://176.65.139.196/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63e5364-8794-283b-0b00-0000eb5f3588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mips","pattern":"[url:value = 'http://176.65.139.196/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2592a85d-6d8a-c83a-e38c-0000e8cd3ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm5","pattern":"[url:value = 'http://176.65.139.196/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448920d1-261a-e9cb-ecdf-000079dd05cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm5","pattern":"[url:value = 'http://176.65.139.196/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7a0b63-ad60-a8ba-9ae5-0000edc37104","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pppc","pattern":"[url:value = 'http://176.65.139.196/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2108da1-22ae-1612-c979-0000bf568469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm","pattern":"[url:value = 'http://176.65.139.196/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96490cba-b2b9-cbb5-d868-00009f0a88c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mips","pattern":"[url:value = 'http://176.65.139.196/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe4d3cd-056b-c8a6-d5be-00006073f01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmips","pattern":"[url:value = 'http://176.65.139.196/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4541794e-185a-95e5-5c05-000071545698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm6","pattern":"[url:value = 'http://176.65.139.196/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448e9cfa-87c0-030b-e8fe-00009bd1d8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/ppc","pattern":"[url:value = 'http://176.65.139.196/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239bca73-a61e-fb34-5e8d-0000f409e68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mpsl","pattern":"[url:value = 'http://176.65.139.196/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9db60a-aaa5-12d5-e291-0000c5c02623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/i","pattern":"[url:value = 'http://78.178.118.193:52357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ae2653-8cdf-93e2-98b8-0000683cd87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b07d08f-2e33-07b8-ef45-0000014349e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad85dc3-b5ca-a253-5294-0000e0821482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153449b0-1d7c-62b6-b30a-00003127bb52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/bin.sh","pattern":"[url:value = 'http://89.189.181.54:34451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0a9b0a-481a-8ce6-9a8b-00008b817ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedf6783-fbc4-43ad-91ae-00002bd5d2fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc80765-6cae-c827-ef55-00006094903f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f46915-e02b-b06b-fdd2-0000e074c258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53cd915-a310-e4fd-d1f4-0000910e2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b5e141-0a93-5cfc-4769-000079402791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a777e9-aef2-730a-8a58-00007a897792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49674a84-2ccb-cfaa-89b2-0000cb0aa5cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277012fc-0940-9c38-6704-00006059ced2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba6d34e-5859-47f3-4d2d-00001bd2758e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79044b1d-1ddd-008c-2185-0000f4682723","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be8df69-5db1-3a6d-7880-00001b0106e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a809f73-35f3-97b1-4ea4-0000b9a08628","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a42031c-17c3-94ca-2d60-000052b56cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34600d7-e3b4-c97f-4012-0000e30f820d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569eb7db-3325-5f5b-edab-0000c9991915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cefefff-2cbb-b614-7a81-0000a3bd6185","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e70316-3465-33f9-a44c-0000f99ebe67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef43119-7d83-4cd9-afb4-00009b0cec78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c4cd30b-b98a-0ddf-95d0-00002d5c3134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea0477f-917d-c694-2f02-0000c23510f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e6be45-45f4-2ddd-2ee5-0000b108ce6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1269adc-ef58-a2b5-e3a6-000029466e26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bcf103-2267-7525-5c75-00003940d44f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af90c5d5-1449-6e3f-c7ce-000039b60295","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d1b45-16aa-5c46-9fa3-000055a0bdba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be769a67-d94a-6031-e9b0-00008b262e2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a431a2-6430-f63e-bab2-0000396cac72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb72316f-4225-79e2-0f35-0000cfabdeaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb247830-f195-cdeb-12b8-00000bf8b7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c4aba9-6809-112c-cb4f-0000f3254059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--addfdd8c-3054-c7de-f016-00003ea3d3f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761c1ca5-0950-e81c-2ed4-0000d9b3db41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54212f93-65a7-fa54-aeca-000055566b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfddbfd7-0cda-9c50-c738-0000e78f7aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/bin.sh","pattern":"[url:value = 'http://39.74.53.25:55617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375ad0a8-7530-d0cb-f524-0000299b34b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7501f9-bd63-8b5c-a357-00007717b9cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227b60d5-15ba-964e-cfdd-0000dd1e7144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1d41e3-eac5-4d31-e9a9-0000d5b63907","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6034b279-40dc-fedc-dabd-000058112e9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--794c7000-ba05-5a61-33cf-0000a423319a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb30a77c-2023-f8e9-ff55-00006e02cea3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce99958d-bc33-1877-7b95-0000987e980c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356044d6-b3fe-5b64-d323-0000a4d5e740","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0eeee-6eb2-af76-dc81-00005c96d50b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9503d77-be6e-6370-f49f-0000a44b2288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da335a2a-ee49-272d-c5a6-00003e28528a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9eb6c9-4f7b-1c2e-b207-0000cf205fd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c2aa6-3572-480c-e3c1-00002435b527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e20cb9-de19-fe3f-f2e9-0000dc484cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c888a7b-ac80-83a3-24ed-00008eddb990","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433a0b90-7ddb-5687-d822-00002c9dfd64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad346abc-2584-ec09-0e98-0000869435ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd8fec8-f2d1-db18-94d2-000069fd142c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1788505c-1b1b-0934-2a59-0000c808c42b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b183114c-491c-cb72-73f9-0000aa9ec031","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6aa504-cd29-db07-06c2-00008d682d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4477cbd8-5f10-5ce0-4b27-00009183cb78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1564c428-448f-ee91-6810-00002761e5e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11cde94-a1e6-c4eb-947a-000005d6e19d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140c8432-db20-7dd6-d4aa-000085c06520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ce185d-eea3-84c4-5330-00006ed58fd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d30ea42-541f-5dd4-feeb-000005203747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ba640-00a4-e804-4ad2-000080085b29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9978e-1c3e-9e2b-546a-0000f80b355c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbb75d9-5eba-9d5d-5351-000078d5acaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b3c4b-8e50-6069-4d4b-00004a41b702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6263f4be-3cac-01f8-9c64-00009fdd828d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fad5a1f-4414-811b-ee9f-00000b3fcb17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mips","pattern":"[url:value = 'http://176.65.139.234/rebirth.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd27035-7afb-67a6-4016-00009134a807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm6","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37d0cfc-ed6c-d6c2-d3e7-0000caa98d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.ppc","pattern":"[url:value = 'http://176.65.139.234/rebirth.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b178a3e-af1f-72b4-ab06-0000983c7839","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62feeab-81cf-84cd-3c08-00004a7714a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.sh4","pattern":"[url:value = 'http://176.65.139.234/rebirth.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecf3d32-463d-3733-b9c4-0000b2aae321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.x86","pattern":"[url:value = 'http://176.65.139.234/rebirth.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84413fb4-c75d-a484-b2f7-00006f2448dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/tplink.sh","pattern":"[url:value = 'http://176.65.139.234/tplink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f9cd6-f0ba-b17d-b32a-0000603ca55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mpsl","pattern":"[url:value = 'http://176.65.139.234/rebirth.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd540a3-0a05-e128-789c-00002988cf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm7","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33816ec9-b8f5-fbd1-1148-00000bc91dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.m68k","pattern":"[url:value = 'http://176.65.139.234/rebirth.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45db218f-1272-7d3d-d047-0000838107e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm5","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d8d6c4-c9f3-bad5-5d71-00003dba43bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmips","pattern":"[url:value = 'http://176.65.139.229/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf4e212-1d6f-13fc-75b5-00003d4c9561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pm68k","pattern":"[url:value = 'http://176.65.139.229/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c893c-8151-995d-f56e-0000caffa550","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pspc","pattern":"[url:value = 'http://176.65.139.229/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486806ab-a133-3fa5-6d8e-00003468b98b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/px86","pattern":"[url:value = 'http://176.65.139.229/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430a100d-a077-e1f5-f187-000056b92df1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.229/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1088d532-904c-c393-fe60-0000ccb54e08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/psh4","pattern":"[url:value = 'http://176.65.139.229/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65da3765-d4d0-535d-9579-00004c6bd7fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pppc","pattern":"[url:value = 'http://176.65.139.229/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a7fcee-8390-5398-3cb8-0000a7b120ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm6","pattern":"[url:value = 'http://176.65.139.229/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb0b1a7-683e-47a5-3d82-00001efe2293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm","pattern":"[url:value = 'http://176.65.139.229/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a0cc78-d95d-65bf-9e18-00001f0d47ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm7","pattern":"[url:value = 'http://176.65.139.229/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccaead54-3399-896f-efe1-0000b5048f45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm5","pattern":"[url:value = 'http://176.65.139.229/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ba16c-e952-e96b-674b-0000fe1e7292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/cat.sh","pattern":"[url:value = 'http://176.65.139.230/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626c3519-257f-5bf3-3112-000001b432f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/telnet.sh","pattern":"[url:value = 'http://176.65.139.230/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517b373a-08d4-c0d4-368a-00008a5a2d39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv4l","pattern":"[url:value = 'http://176.65.139.226/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e56560-9ff5-1ad8-6753-0000744b07c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.i486","pattern":"[url:value = 'http://176.65.139.226/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4860067b-4fcc-4432-5be6-0000b73a0489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv5l","pattern":"[url:value = 'http://176.65.139.226/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4a79f8-49c1-dce1-12e2-000027550d7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sh4","pattern":"[url:value = 'http://176.65.139.226/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634d55b8-3064-ec2c-f3ba-0000f09a7e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv6l","pattern":"[url:value = 'http://176.65.139.226/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5664f9-dc53-91e1-eccd-0000cdfa57e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv7l","pattern":"[url:value = 'http://176.65.139.226/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d90b10-6226-89f4-cf59-0000f4ab55a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.m68k","pattern":"[url:value = 'http://176.65.139.226/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf76a09-0eb4-be56-9e75-0000476c9aa8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.x86_64","pattern":"[url:value = 'http://176.65.139.226/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4fbca8-9610-8437-c105-00008d0ef4be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/cat.sh","pattern":"[url:value = 'http://176.65.139.226/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117cb335-2688-3ab4-b1fa-0000408da2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/telnet.sh","pattern":"[url:value = 'http://176.65.139.226/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d8425-bcd4-fe6d-ec0b-0000ebaee0d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sparc","pattern":"[url:value = 'http://176.65.139.226/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9474e9d-8837-f4b9-6133-000087ffd84c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsrouter","pattern":"[url:value = 'http://176.65.139.226/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ca306a-aa85-4985-fd79-000015c116d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.arc","pattern":"[url:value = 'http://176.65.139.226/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102c0c7c-7e69-7664-7080-000037f0f765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.aarch64","pattern":"[url:value = 'http://176.65.139.226/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449920a8-7b21-72fa-cbae-00003f4a4670","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.powerpc","pattern":"[url:value = 'http://176.65.139.226/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df53fc6-ff20-d1a5-f3df-0000f45d837e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mips","pattern":"[url:value = 'http://176.65.139.226/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3691706e-40f7-db94-9cfa-00001e087996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsel","pattern":"[url:value = 'http://176.65.139.226/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51159c22-a995-9054-8876-00007f96f68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.aarch64","pattern":"[url:value = 'http://176.65.139.230/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5a9fed-ed2a-e090-753a-0000282b2878","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.arc","pattern":"[url:value = 'http://176.65.139.230/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf5e34c-efbb-ceb7-4461-00003572979d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.i486","pattern":"[url:value = 'http://176.65.139.230/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1281c011-d9aa-5ad8-64e3-0000b8d7e803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/i","pattern":"[url:value = 'http://182.121.179.166:53602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec5c4fb-1ec2-91b7-36d6-0000097ffd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d145ba-9200-b778-35c1-0000406567b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56913139-494b-a1f9-78aa-00009e993f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6b2c4a-41dc-f240-e0f3-00006a2a9e0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_213534.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_213534.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--737476d2-0773-1e29-ef10-00005476cfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.30/mb/crypted.ps1","pattern":"[url:value = 'http://217.60.241.30/mb/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03336b5d-f2aa-a905-faa4-0000a9cb2b34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8787254-0a17-dd5b-0e84-0000dc142150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1186804b-2194-7328-35aa-0000b7e199c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcadee3-e764-6955-9cd9-00003bd8e813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c0c84a-69de-4db4-4510-0000113cd23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ad4879-9952-91eb-ac09-00003f910c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f27e0ef-295d-08eb-83d9-0000adbc94cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/gpon","pattern":"[url:value = 'http://176.65.139.242/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a159310-9ed3-0613-01a4-0000dfe1dbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a738de-c1c6-1214-f6ab-00002c4cd717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26810e4c-04c2-dd85-7b17-000089caaf14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check1.sh","pattern":"[url:value = 'http://176.65.139.211/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55e9ec6-c8df-c4fd-ba6f-0000024574fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check.sh","pattern":"[url:value = 'http://176.65.139.211/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86b9dfc-16a4-c237-94a2-000056278345","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto1","pattern":"[url:value = 'http://176.65.139.211/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c2c114-e841-b635-4582-000048d20bd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa2d975-b519-f0ce-732d-0000ce6e5358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva.sh","pattern":"[url:value = 'http://217.60.195.187/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ca5c95-5014-89bd-68b0-000062110617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.211/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7aec13-0da2-9284-3182-0000a80d7ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4faa581-9f9f-c4fc-c149-00009a996743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db610d1-e9fe-2541-e112-000010fd1e6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1a7618-518b-aa2d-5817-0000624490c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db74e141-dd2f-1d2c-7a4f-00009523d50a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6953db11-5d08-7b62-caef-0000793c901a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7440b-067d-28e0-d6e9-00004fef47ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c53b749-2262-10cc-e781-0000d2dbcbcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14f717e-1a7f-6e04-2d48-00007a5e1493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/gpon","pattern":"[url:value = 'http://176.65.139.243/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad06ab9-812e-f136-1e27-00002738d1c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/dddd.sh","pattern":"[url:value = 'http://217.60.195.187/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dc56bf-683c-e7b3-9952-000059f098c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto","pattern":"[url:value = 'http://176.65.139.211/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0793a331-32a6-2371-9ffc-00003df3e7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.211/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b12e49-c42f-6681-261e-00003c5c7952","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e223d12-b46c-eb87-cd40-0000545c3b74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4d9be0-aa0f-66cc-8b8d-0000c74cfbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eac564d-b811-e6a8-9593-0000bfb54e12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a847d6-be66-fe7e-c82e-00001a47feb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8886e21-756d-f380-601c-0000d5e424fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad70f7f-3467-e768-bb90-000034f43111","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e18687-5427-b892-6172-0000aad8a5b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bf416b-e968-fe24-8a2e-00000248b182","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fe15b1-3511-a518-3d90-00005d5ae804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c06b41-79ef-b4ef-b034-00009843d292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ccccc46-096b-be4a-d359-000075fca239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c2d01eb-2078-5ddd-b7e0-00000d051787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a45af7-520b-a88c-ea0e-0000d512f220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.97/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131e6783-e293-2d1b-5be7-0000c7b62067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbf4f65-6ffc-41e2-3121-00009655b1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98b0045-5221-5d15-e124-0000f84d50d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf0749d-7e3a-93f5-c016-0000f753208f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb952cec-f4cf-7b53-f408-0000edda60b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b871fd-dec4-6014-dd5a-0000baf4d6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ca332-4214-df78-6aff-0000af0a44c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traff","pattern":"[url:value = 'http://176.65.139.211/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b6ca8-4333-cd6f-4549-000046e9949a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ffaa2e-2c99-3a04-35e7-0000bf4f95d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c154e589-abdd-cf4c-970f-0000559df724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec5f97-41d4-a14f-ed5a-000098b50448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d597cc0c-ace9-3719-5394-0000f44822ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/nvidia.sh","pattern":"[url:value = 'http://176.65.139.211/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a45b3d-2e96-1e3c-4293-00005031d015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664c85d4-9ebb-ea19-139e-00004768b991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4544682-9e7d-f33f-f7d4-0000dce2f78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5aa8e8-ceed-d714-3959-0000bee74ab0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3eb610f-9a73-b4c8-8b61-0000b4146376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b364d0-fb70-ca7c-1506-00002a063c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.97/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17f95a8-c230-bff6-9717-0000ef915b65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/loli","pattern":"[url:value = 'http://176.65.139.211/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ef541d-8190-e499-8a50-00000eea1262","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/gpon","pattern":"[url:value = 'http://176.65.139.241/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c1173-7ed8-d89c-0cc5-000093c5adc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/bolts","pattern":"[url:value = 'http://216.9.226.120/nuts/bolts']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6105def3-a648-95c4-d487-00002c259458","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traffaarch","pattern":"[url:value = 'http://176.65.139.211/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63b0031-334f-0942-dd6d-000060d4238b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71441c24-3745-42bf-7c37-00005cf47337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a212ad88-8c97-ef11-7b36-0000f340bcd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e332d42-cda9-fd80-afa1-0000189227e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c5c3e-4a49-f982-2d53-0000fe55f3ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc755d9-96b0-c7ca-adde-0000b4e2b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb87ff3-9166-47f5-a680-00002ee9d6bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ec41b2-9299-4b0b-001e-00007272bfe2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/gpon","pattern":"[url:value = 'http://176.65.139.237/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab062688-637d-896d-aff0-000031ed292c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/gpon","pattern":"[url:value = 'http://176.65.139.238/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a23c6e9-2716-9b73-38f4-00006d82af21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/1","pattern":"[url:value = 'http://176.65.139.211/1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d031e7-cb05-9343-a7e9-00001855562f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d24bb0-9085-55d5-5f13-00004a789eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/poop","pattern":"[url:value = 'http://216.9.226.120/nuts/poop']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9f6898-f447-77a5-94fc-0000cae2c311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i468","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5362f242-22c8-a320-b1a5-0000025e9f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86_64","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9466f47e-8387-0fe3-3990-00007e18e0b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mpsl","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce9269d-98d6-ab72-ab44-00001bb5b799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211:3000/watcher-script-aarch","pattern":"[url:value = 'http://176.65.139.211:3000/watcher-script-aarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc862c46-2034-8f4e-3877-0000bd8bf9ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc280b-83dd-a8f1-ce31-000037ac8a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm7","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d980661-6ed5-c4fa-0895-000015ed5824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.m68k","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ecaa84-981e-f51a-273a-0000ef1e0cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.ppc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d076c802-6094-f993-500b-00004db7185f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f720bc7f-e929-a727-bffd-0000d8c5ab48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i686","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d726ace7-cc2b-0b21-79f2-00008864f544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86_64","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cb189d-2550-9222-d0e1-00008f10edee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm6","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be48d3-9d38-965a-5fd4-00006fc09530","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.sh4","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3e0141-2b55-76a4-8768-00005d548e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b432b7-f800-982d-1d81-0000151b8efe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mips","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06aa14dd-7822-e979-9d78-0000698a7e68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.spc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b04ebe21-f86c-930b-98fd-000026db8668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/main","pattern":"[url:value = 'http://176.65.139.211/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3198157f-7cbf-e10b-c081-000062ba9790","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/boss","pattern":"[url:value = 'http://176.65.139.211/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cca0c2f-d5dd-247e-c464-0000106320ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cliaarch","pattern":"[url:value = 'http://176.65.139.211/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e289c-1487-ffd3-6895-000081f4a7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/Error84","pattern":"[url:value = 'http://176.65.139.211/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7c2075-1ca4-4fc4-2e05-00006a7bf68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cli","pattern":"[url:value = 'http://176.65.139.211/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295e9b4a-8b96-8fbe-a0ac-0000971d62b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc24927-c808-c9dd-6b4f-00009da54200","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm5","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f9b45c-961e-0cb3-9c31-0000d518b38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://alphalkenya.com/VSooNlFLuZpdMiw.exe","pattern":"[url:value = 'https://alphalkenya.com/VSooNlFLuZpdMiw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fcf339-5cb9-0d09-b595-00005456974f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/bin.sh","pattern":"[url:value = 'http://125.44.47.23:54371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2d5273-d988-5b30-34eb-00006f93f078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/bin.sh","pattern":"[url:value = 'http://115.56.161.81:37957/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42be4239-e73c-b744-cdfb-0000315a28ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8626ac-5186-e512-949d-0000e3114464","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183e0bab-0c22-ad48-a03f-000003ce3357","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5202367-7884-493c-a6e2-00003c29cf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22713f1-7710-a010-ff1c-00008495a872","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3027a46-abeb-5ef2-8b07-0000bbbf445f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48aff12-e7a9-4fdf-18c9-0000759da528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2e424b-9dad-61b7-d99a-00009620079c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35aa1e37-1c76-a400-5e63-00003710c3a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d740d0d-e400-6e0c-78f7-00001e681db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5e91a0-3872-d5b1-3d69-0000c987df7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50cab0c-aba3-87a4-a892-0000b9299576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/dddd.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37eca06e-951f-b6ee-6056-0000b184b109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615839db-2d1a-5c81-2eec-00001e9ecb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc1f67c-ccc5-d7bc-ec0b-000007186018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://18.175.166.211:60101/linux","pattern":"[url:value = 'http://18.175.166.211:60101/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838d77f4-c0b2-19fa-61e5-0000b5cc8e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.172.100:60117/linux","pattern":"[url:value = 'http://47.236.172.100:60117/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e764f176-d7cf-5970-d951-0000e3722416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.85.120:60142/linux","pattern":"[url:value = 'http://8.219.85.120:60142/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98818c07-e51b-1044-1d17-0000fcb03742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://49.235.101.101:60147/linux","pattern":"[url:value = 'http://49.235.101.101:60147/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1119fa-a281-8ad1-057b-0000bd953a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.146.147:60134/linux","pattern":"[url:value = 'http://47.236.146.147:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa89a96-cd43-43f2-d2ec-00005e4bc8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.28.220:60115/linux","pattern":"[url:value = 'http://47.236.28.220:60115/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea16e865-7cda-d994-5710-0000d819803a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.84.42:60116/linux","pattern":"[url:value = 'http://47.245.84.42:60116/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41019f3-f766-0e21-145f-0000c543318f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.226.68.236:60128/linux","pattern":"[url:value = 'http://64.226.68.236:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7b97e-e82a-a123-9022-00009a1e4222","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.155.47:60149/linux","pattern":"[url:value = 'http://8.219.155.47:60149/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc21111-a92b-236f-1e58-0000cf210cb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.179.91:60122/linux","pattern":"[url:value = 'http://8.222.179.91:60122/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee44f491-0e3d-cc64-e7ae-000009c636b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.62.229:60143/linux","pattern":"[url:value = 'http://8.219.62.229:60143/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb30aaaf-e92d-5814-d85c-000054633bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.122.72:60123/linux","pattern":"[url:value = 'http://47.236.122.72:60123/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6570ce2e-e6e0-e0ed-57d3-0000c3d9a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.70.102:60108/linux","pattern":"[url:value = 'http://47.236.70.102:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3406ba-ff42-a958-a261-00004b516df0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.169.170:60119/linux","pattern":"[url:value = 'http://8.219.169.170:60119/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abede522-5669-6f82-fd22-0000320d4ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.69.227:60133/linux","pattern":"[url:value = 'http://8.219.69.227:60133/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963fb75-152c-66e7-378c-000085bfe7f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.210.218:60139/linux","pattern":"[url:value = 'http://8.219.210.218:60139/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89634012-14bb-ff25-1980-0000cf164dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.241.116:60106/linux","pattern":"[url:value = 'http://8.219.241.116:60106/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35afb323-b587-4a4d-bb7c-000047fcfe20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.180.235:60136/linux","pattern":"[url:value = 'http://47.236.180.235:60136/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0283687-8525-819e-c505-0000aca571d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.167.249:60128/linux","pattern":"[url:value = 'http://47.237.167.249:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c070d2-6b6b-7965-ca91-0000ce201f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.127.21:60124/linux","pattern":"[url:value = 'http://47.237.127.21:60124/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb76b69d-8dfa-5261-e0c8-00000a44b3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.124.1:60108/linux","pattern":"[url:value = 'http://47.237.124.1:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f68a8-588c-1ef7-b07a-00005334d469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.247.229:60132/linux","pattern":"[url:value = 'http://8.222.247.229:60132/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d3d13b-a126-29e2-c3be-00005bb138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.213.23.56:60134/linux","pattern":"[url:value = 'http://222.213.23.56:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a167b3c6-e31d-c837-e1b5-00007d6aa67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://114.67.87.14:60125/linux","pattern":"[url:value = 'http://114.67.87.14:60125/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc173701-6360-25b2-b145-0000e6600ad6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.111.51:60121/linux","pattern":"[url:value = 'http://47.245.111.51:60121/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f634381-a61d-8f06-947b-00001b6e1852","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.13.23.149:6819/linux","pattern":"[url:value = 'http://106.13.23.149:6819/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1f8934-176d-0c42-d6ec-0000b05d2639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/i","pattern":"[url:value = 'http://115.56.161.81:37957/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae682a-3de3-b909-9162-00005de6e9cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/i686","pattern":"[url:value = 'http://176.65.139.247/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42cbcf1-1a7b-ff16-c725-00003ad8d1fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/bin.sh","pattern":"[url:value = 'http://125.42.33.2:54415/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3876b477-2e50-af4e-c5d7-00009c0784f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mipsel","pattern":"[url:value = 'http://176.65.139.247/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b1a0e0-1d30-b90a-4f90-00004ff5aa89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv7l","pattern":"[url:value = 'http://176.65.139.247/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23ae6e2-6f39-1714-555d-00009038cc7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mips","pattern":"[url:value = 'http://176.65.139.247/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4687c262-91c7-8cc7-a67b-00003535f9e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv5l","pattern":"[url:value = 'http://176.65.139.247/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9cf323-0426-3e8c-a589-00000855d059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv4l","pattern":"[url:value = 'http://176.65.139.247/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba669a8-1f47-c4a5-667c-0000a8979f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/i","pattern":"[url:value = 'http://125.42.33.2:54415/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb565646-cac3-7e02-d7fe-0000ee88ba34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/bin.sh","pattern":"[url:value = 'http://123.5.124.6:35918/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537dec1c-49c9-9abc-c52d-00003d35ae88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.185.91.8:52353/i","pattern":"[url:value = 'http://123.185.91.8:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6def627b-d8d1-1541-771f-0000cbac34be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/i","pattern":"[url:value = 'http://123.5.124.6:35918/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71196feb-67c1-54b1-b1c7-0000d7cfa536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/adb.sh","pattern":"[url:value = 'http://129.121.110.105/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0afd49-7c67-3500-0478-0000cafa85f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/adb.sh","pattern":"[url:value = 'http://92.38.167.76/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddfcc0a-fe27-9277-5f02-000088c29792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/fSegv","pattern":"[url:value = 'http://94.154.43.102/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79490fed-caa3-78cf-2dd3-0000ddd4e3df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/Sgsa","pattern":"[url:value = 'http://94.154.43.102/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0bc1ea8-6323-b521-90d2-0000358b89ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/adb.sh","pattern":"[url:value = 'http://94.154.43.102/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90437c8c-bbcc-76aa-7126-00007006810a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/adb.sh","pattern":"[url:value = 'http://129.121.114.124/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0580ead3-18c5-fd83-4539-000032905684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Sgsa","pattern":"[url:value = 'http://129.121.110.105/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7849670f-3b2f-c235-f3f8-0000da9606bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/fSegv","pattern":"[url:value = 'http://129.121.114.124/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc21844-edb1-375a-08b2-000074945b5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fSegv","pattern":"[url:value = 'http://129.121.110.105/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5331b9-6955-eed2-7eff-00000ac687d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/Sgsa","pattern":"[url:value = 'http://92.38.167.76/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bf43d9-004b-c2ec-071d-0000f6a4f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/fSegv","pattern":"[url:value = 'http://92.38.167.76/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a88825-8676-b74a-2c89-0000e1a7f86c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Sgsa","pattern":"[url:value = 'http://129.121.114.124/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7cdd8cd-c1b0-4225-d536-0000c135b140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/jaws.sh","pattern":"[url:value = 'http://93.114.194.171/d/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b749ccd9-5110-b21a-d6f9-00001e612ad0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/toto.sh","pattern":"[url:value = 'http://93.114.194.171/d/toto.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5adc3f-fdef-1805-558a-00007d72d576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/sharp.sh","pattern":"[url:value = 'http://93.114.194.171/d/sharp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--983d8eae-3161-5583-9e5b-0000daf8cc88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/coke.sh","pattern":"[url:value = 'http://93.114.194.171/d/coke.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8232286c-fb93-e7f6-ffe8-000020318842","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm7","pattern":"[url:value = 'http://93.114.194.171/d/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f70335-755f-d0da-2fb9-0000de22564f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/aarch64","pattern":"[url:value = 'http://93.114.194.171/d/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b862bb-7ae3-9627-4e61-0000af0c6690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mipsel","pattern":"[url:value = 'http://93.114.194.171/d/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b6dd47-f648-ad01-6280-000097377335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm","pattern":"[url:value = 'http://93.114.194.171/d/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3c4940-61cd-959c-0315-00008a3840c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm5","pattern":"[url:value = 'http://93.114.194.171/d/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d9b65d-1475-0af8-1df1-0000dd829b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/nigger/arm5","pattern":"[url:value = 'http://205.237.110.232/nigger/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82980241-de7f-0adc-e567-000049ccdb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/i586","pattern":"[url:value = 'http://93.114.194.171/d/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bca0fb2-5c54-48bc-c82e-0000ce8558ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/aarch64","pattern":"[url:value = 'http://205.237.110.232/no_killer/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f4d128-8e19-c80a-8869-0000e0db903b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/proxy/mipsel","pattern":"[url:value = 'http://205.237.110.232/proxy/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d446f94b-8a07-dd0a-f172-0000d278990a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/mipsel","pattern":"[url:value = 'http://205.237.110.232/no_killer/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b84d023-5c8d-d897-e8af-0000a5903fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/gpon","pattern":"[url:value = 'http://176.65.139.236/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f14caf9-c1b3-11f9-534b-000065ace6d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/adb.sh","pattern":"[url:value = 'http://64.118.132.61/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4d1fd4-c269-fe95-6d2c-0000bbc1eb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/test.sh","pattern":"[url:value = 'http://64.118.132.61/test.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f79013a-3ce7-6388-cb69-0000ed48ddae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/yarn","pattern":"[url:value = 'http://36.255.97.21/yarn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62705e3e-9ef2-5edd-2f2a-0000aebe8cb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/o.sh","pattern":"[url:value = 'http://62.84.172.106/o.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919a8313-c532-ca04-f64a-0000ea62e9c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/goahead","pattern":"[url:value = 'http://36.255.97.21/goahead']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb3bf0-4a7b-77c7-5b62-0000576ff2be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zyxel","pattern":"[url:value = 'http://36.255.97.21/zyxel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdc2a9f-905d-dac3-da73-0000e237e8f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/x","pattern":"[url:value = 'http://72.56.52.158/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f69a36-c5f9-d6ee-3dc3-00000be0e927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/pulse","pattern":"[url:value = 'http://36.255.97.21/pulse']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faf3284-d4cd-043b-d534-0000b9531c85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zte","pattern":"[url:value = 'http://36.255.97.21/zte']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3322a585-a345-b555-6f7b-0000159895be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/huawei","pattern":"[url:value = 'http://36.255.97.21/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b29599-1cc2-1031-5211-00002fed6a4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/realtek","pattern":"[url:value = 'http://36.255.97.21/realtek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7600a0c-c5aa-36bb-9309-00004a3135ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/hnap","pattern":"[url:value = 'http://36.255.97.21/hnap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00131cc-6371-f4c6-82bd-0000dd991d7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.29.95:46111/bin.sh","pattern":"[url:value = 'http://182.119.29.95:46111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baacf6-cab0-1460-78f1-00006c39e34f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/run.sh","pattern":"[url:value = 'http://91.92.40.13/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c760f8-c518-402c-4337-00002f5c5b27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751f81cb-fa2c-2e18-79fa-0000c61c9885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd359e7-0ad9-4ea4-c684-00002c78e6b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96e00f7-ffe2-8469-78b9-0000eef76c5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.armv5l","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd41fd2-c400-a8ad-0285-0000369fbc2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm5","pattern":"[url:value = 'http://64.118.132.61/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d3395a-9708-0158-9eff-00008403e01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/sh4","pattern":"[url:value = 'http://64.118.132.61/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7681db0d-bd80-0a42-a35b-000004dd79e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc","pattern":"[url:value = 'http://64.118.132.61/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21de601d-a673-e1f5-03df-0000e41ee1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/mips","pattern":"[url:value = 'http://93.114.194.171/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b24c38-6dcd-6b82-b955-0000a7ad232c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mpsl","pattern":"[url:value = 'http://36.255.97.21/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5273bb06-b8a7-3339-cd8a-00003ec66ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/lg","pattern":"[url:value = 'http://36.255.97.21/lg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77538561-20fc-9441-8d1a-000009f5888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/dmpsl","pattern":"[url:value = 'http://93.114.194.171/dmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2179aafd-e56e-940e-6fff-0000345b38f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips","pattern":"[url:value = 'http://62.84.172.106/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16f161-a088-4a46-997d-000044108198","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm5","pattern":"[url:value = 'http://36.255.97.21/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dad9e56-cdf6-0caf-38e2-0000dbe26f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm7","pattern":"[url:value = 'http://62.84.172.106/sys64.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e751f83-0c52-b9d9-804c-0000fa306b24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86_64","pattern":"[url:value = 'http://62.84.172.106/sys64.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4a04eb-e490-cbc8-de0c-0000a3a417ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d594fb-c666-f9fc-264c-0000ae73b0f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592273c0-6568-135a-cd19-0000b4abb866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b53c7e-130b-38a0-7db1-000062e13e09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08afd0cd-d8c2-a32a-d180-0000aa503bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5f746b-c791-f8ca-5d41-000000739102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dd4e68-2983-066d-8946-0000242a13c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm6","pattern":"[url:value = 'http://64.118.132.61/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b6b42-b4ca-d4de-3236-0000c6b60669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc440","pattern":"[url:value = 'http://64.118.132.61/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a1701-e8f2-8a90-34fe-000010e24273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mips","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879f76e2-f0a2-3578-7f4a-000047c51142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mipsel","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98e5094-41ee-2a2f-fe42-0000bed7a608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/m68k","pattern":"[url:value = 'http://64.118.132.61/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcef2775-054f-9d8e-51b2-00004c3ca265","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e131505-d6ac-f5a7-e547-000041b62001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a26442-e307-8da4-f3ec-0000be2170d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mips","pattern":"[url:value = 'http://64.118.132.61/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0070a28b-2e55-4713-7fba-0000d5221e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mpsl","pattern":"[url:value = 'http://64.118.132.61/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0259887-cbb6-7f90-9e91-0000e2909c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/aws","pattern":"[url:value = 'http://36.255.97.21/aws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fd16d-98a8-e126-9c65-0000bce5f409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm5","pattern":"[url:value = 'http://62.84.172.106/dlr.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f20cb4-1ad7-1c6e-9486-0000c927cf27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.114.194.171/mips2","pattern":"[url:value = 'http://93.114.194.171/mips2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c974e084-af95-da53-69f9-00001b5cb0f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.ppc","pattern":"[url:value = 'http://62.84.172.106/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c64b5f-0a69-3c7b-8b8e-0000f21cdd8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68712d2c-58be-8682-b290-0000c209e107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.ppc","pattern":"[url:value = 'http://62.84.172.106/sys64.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0326cb1f-61eb-5ff1-ff2a-0000190f2a98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/thinkphp","pattern":"[url:value = 'http://36.255.97.21/thinkphp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ab6c34-ec63-ef0e-b806-00005f5856bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mpsl","pattern":"[url:value = 'http://62.84.172.106/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65767527-c445-ac53-7697-0000225a4c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/wow","pattern":"[url:value = 'http://205.237.110.232/wow']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f410a22-8b9a-af38-8b45-0000348b4e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.i686","pattern":"[url:value = 'http://62.84.172.106/sys64.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fbb6ab-2492-b02f-68fd-0000b9abd5b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86_64","pattern":"[url:value = 'http://36.255.97.21/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151fa0db-7917-be74-d9f6-000056a52e76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm6","pattern":"[url:value = 'http://36.255.97.21/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d23cf7b-ba19-4b05-12de-000042d778f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.sh4","pattern":"[url:value = 'http://62.84.172.106/sys64.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028d648f-67cc-ab44-0612-00008c87482f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.ppc","pattern":"[url:value = 'http://36.255.97.21/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d584ea-db84-34ba-0f10-0000f9556b35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mips","pattern":"[url:value = 'http://62.84.172.106/sys64.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abd5e38-8148-27d0-70d4-00004fe64ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2602d3-5425-289d-66e4-00009b822904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sh4","pattern":"[url:value = 'http://62.84.172.106/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fcfb21-eb80-e343-09f5-00008ebaef9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/gpon443","pattern":"[url:value = 'http://36.255.97.21/gpon443']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d24e437-adca-d2f2-6851-0000d343649f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.aarch64","pattern":"[url:value = 'http://62.84.172.106/sys64.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d559e2b-0bcd-9829-6aa4-000034adee2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.m68k","pattern":"[url:value = 'http://62.84.172.106/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a3ff7a-6fb9-7bfb-6c41-000071eba7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm5","pattern":"[url:value = 'http://62.84.172.106/sys64.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e608340-c842-2bce-45f1-0000d9f062c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips64","pattern":"[url:value = 'http://62.84.172.106/dlr.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7204e76-fc2b-aed9-7634-0000f19e13a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86_64","pattern":"[url:value = 'http://62.84.172.106/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c31ce2-c1fd-ce1d-375f-0000ba0a8f72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86","pattern":"[url:value = 'http://62.84.172.106/sys64.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4cbe27-8421-cc36-c424-0000cc589bbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.m68k","pattern":"[url:value = 'http://36.255.97.21/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b252936c-586e-a877-25f4-00006ab29e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://72.56.52.158/ass","pattern":"[url:value = 'http://72.56.52.158/ass']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c074223-7d79-98c6-3a6e-00009256057f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mpsl","pattern":"[url:value = 'http://62.84.172.106/sys64.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1edb610a-8910-70a8-f688-0000940691dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/i586","pattern":"[url:value = 'http://205.237.110.232/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820680d7-4e88-c78d-9e7e-0000ae505be7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm6","pattern":"[url:value = 'http://62.84.172.106/dlr.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f9b03c-afd4-d08b-4406-0000f9a3bdef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.m68k","pattern":"[url:value = 'http://62.84.172.106/sys64.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77df86d8-dc2d-b98f-1659-00000c59d1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.sh4","pattern":"[url:value = 'http://36.255.97.21/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--011e6646-9ffa-f19a-ab56-000049c9459f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm","pattern":"[url:value = 'http://62.84.172.106/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01babee-1781-69d2-3925-0000909c146a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm","pattern":"[url:value = 'http://62.84.172.106/sys64.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aaaaec0-7746-0d7f-730a-0000635e0825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm6","pattern":"[url:value = 'http://62.84.172.106/sys64.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae7e24d-68f4-fa9a-b632-0000de12bd42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm","pattern":"[url:value = 'http://36.255.97.21/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ed2435-506f-ccd5-0b5e-0000f9851d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.i686","pattern":"[url:value = 'http://62.84.172.106/dlr.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33aae194-b2af-ec33-02a4-00007f0addea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sparc","pattern":"[url:value = 'http://62.84.172.106/dlr.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6608af1-6044-c8b3-7232-0000ccae4d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mips","pattern":"[url:value = 'http://36.255.97.21/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2518fa67-41dd-0b58-45be-000044d1094f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2aaed","pattern":"[url:value = 'http://5.182.210.174/d2aaed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826cfda4-4562-2906-a3c1-0000cf110213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9da0b2","pattern":"[url:value = 'http://5.182.210.174/9da0b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f2c4761-a8b1-eff5-5b60-0000308351c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0b3b49","pattern":"[url:value = 'http://5.182.210.174/0b3b49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ad4ad6-2958-44b5-2752-0000df837414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7f80fa","pattern":"[url:value = 'http://5.182.210.174/7f80fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a710c0bb-cc04-a340-1bcf-0000eb3093d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7addc","pattern":"[url:value = 'http://5.182.210.174/e7addc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602719b8-1ed1-761c-0d2a-00000131f615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6337f1","pattern":"[url:value = 'http://5.182.210.174/6337f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158d70d7-f7fc-9acb-56ec-0000c086e065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d7d14","pattern":"[url:value = 'http://5.182.210.174/2d7d14']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e2d9e6-b2c4-f982-ae77-000047e7148b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110181","pattern":"[url:value = 'http://5.182.210.174/110181']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c7d369-3ffc-4d43-b23e-00001c6574a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7e44c2","pattern":"[url:value = 'http://5.182.210.174/7e44c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc705f63-f7c8-b32f-acf7-0000d3c100bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b4efc0","pattern":"[url:value = 'http://5.182.210.174/b4efc0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2695dc-9617-4125-5f6e-0000aede72d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76341d","pattern":"[url:value = 'http://5.182.210.174/76341d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fba434-38d2-4280-9310-000037105ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83c238","pattern":"[url:value = 'http://5.182.210.174/83c238']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b7af0c-398d-419c-74de-000081f63a37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/meow.sh","pattern":"[url:value = 'http://176.65.139.247/meow.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a6ddf5-15c7-348c-0ec9-00004c5a4972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/bin.sh","pattern":"[url:value = 'http://110.37.23.183:58054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f200c0a-5f42-dc5b-5fa6-00006e3aafc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.120:42203/i","pattern":"[url:value = 'http://42.4.25.120:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c3346b-3b8d-8988-c123-000009b30170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd08642-4e49-3c73-9203-00006c62f1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9126cf-b15e-03e5-a4a7-00002a53b45b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/o.xml","pattern":"[url:value = 'http://176.65.139.247/o.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57410444-d407-82cf-f5b4-0000e652d4e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/peak.sh","pattern":"[url:value = 'http://176.65.139.247/peak.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36369c38-7cfc-d20b-d80e-0000cc40a13f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/hypeman/agent.bin","pattern":"[url:value = 'https://sumiko.vu/hypeman/agent.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78fae22-c656-69a8-d594-0000823cd831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ae66fb-da91-915b-8f89-00004f2e9b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta","pattern":"[url:value = 'http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--101db2df-03f7-62a3-94f9-0000c7569750","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://144.172.107.214/29/goodthingsforbestpersonforme.hta","pattern":"[url:value = 'http://144.172.107.214/29/goodthingsforbestpersonforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc5158e-2481-ee0d-620f-0000c366a3b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4710c3-bc0a-6920-3d36-0000c5e5ab4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta","pattern":"[url:value = 'https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25d34e0-073a-33b9-5dfe-0000f3644b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/bin.sh","pattern":"[url:value = 'http://42.233.106.94:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403d16e4-0d9e-7330-0954-00001e6dc454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff5caac-e5f3-82ea-9e03-0000d8d6d8a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta","pattern":"[url:value = 'http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa2541f-9ef6-12f2-e960-00000503fb0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b8a963-c959-6bac-134a-000004980c4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_041741.png","pattern":"[url:value = 'http://107.172.172.254/img/img_041741.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02d2ec1-e3a1-a59e-5080-00002ac3ec70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/bin.sh","pattern":"[url:value = 'http://222.141.47.192:60272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd1e4d7-7307-4ff8-e1da-0000b776b25d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/i","pattern":"[url:value = 'http://119.189.160.169:47495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a23851e-eb89-ce1c-8fed-0000065dd622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/i","pattern":"[url:value = 'http://110.37.23.183:58054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf669434-1290-8a4a-4776-000066e8835e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/i","pattern":"[url:value = 'http://222.141.47.192:60272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c7a7aa-396f-9ced-d264-0000c4dfe082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/bin.sh","pattern":"[url:value = 'http://182.121.10.198:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb83254f-50b6-fe75-30af-000013f28d95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/ttues/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/ttues/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcea6f1c-eee5-0ea4-ed5d-000043f06308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd6152d-c7b1-c529-3cf7-00009ce601b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/bin.sh","pattern":"[url:value = 'http://210.208.110.20:51485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a978c6-bddf-2f6e-7798-000029b84789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/i","pattern":"[url:value = 'http://42.233.106.94:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583f19d5-ee21-cb69-5bbb-000052523608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/i","pattern":"[url:value = 'http://182.121.10.198:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ecc24d-b80a-afe2-29c5-0000dc44409a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/i","pattern":"[url:value = 'http://210.208.110.20:51485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d48cd89-feb8-bf63-e205-00001cc1053d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/bin.sh","pattern":"[url:value = 'http://61.54.232.80:41350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc5dd0f-d42f-d6b5-66b3-000020b28fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mukabar.co.mz/css/images/stego_oo8nser2q2.png","pattern":"[url:value = 'https://mukabar.co.mz/css/images/stego_oo8nser2q2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaa7152-a8eb-8a95-41a7-00009b69bd8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.74/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.74/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0011c8-1d13-85e7-3c3b-00003813a1ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.233.127:51731/bin.sh","pattern":"[url:value = 'http://115.57.233.127:51731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bca288a-9938-472d-3b43-00003e385ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/i","pattern":"[url:value = 'http://61.54.232.80:41350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbc962b-49f1-46d5-6331-000025a23eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.108.151.84:39084/i","pattern":"[url:value = 'http://101.108.151.84:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78e9e3a-02eb-4bdf-d99e-000038482c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/loli","pattern":"[url:value = 'http://176.65.139.195/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2d5d2d-5f75-90ce-9960-00008e29ef3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto","pattern":"[url:value = 'http://176.65.139.195/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64c9e9f-fbf3-0ca1-acbd-00009291108a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto1","pattern":"[url:value = 'http://176.65.139.195/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88a5be-85be-1dd3-9809-00000ba5d5d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/nvidia.sh","pattern":"[url:value = 'http://176.65.139.195/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e67fe-3dae-e96a-a6c9-00007627587a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check1.sh","pattern":"[url:value = 'http://176.65.139.195/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17691eed-eb72-6366-6345-0000b563e069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/boss","pattern":"[url:value = 'http://176.65.139.195/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad660299-a206-0ebb-0ba6-000090536093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.195/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e80d09-1b81-63c8-7c6e-0000e0d86a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check.sh","pattern":"[url:value = 'http://176.65.139.195/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c9fe0-ecb7-bb5f-c494-0000f2fe3e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cliaarch","pattern":"[url:value = 'http://176.65.139.195/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bfb5b3-26e7-d2f8-1357-0000f102f191","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/main","pattern":"[url:value = 'http://176.65.139.195/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede7927d-3bab-41e5-ae06-0000d5462103","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/oldboss","pattern":"[url:value = 'http://176.65.139.195/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df75f65-a3a9-63ea-55f9-0000a4906a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/Error84","pattern":"[url:value = 'http://176.65.139.195/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06471e45-e0aa-34f4-8cc6-0000bedee16f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cli","pattern":"[url:value = 'http://176.65.139.195/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbba051-372b-cd4d-f0ac-00006bbcd709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traff","pattern":"[url:value = 'http://176.65.139.195/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ffd3d-6862-e5a1-f784-0000cfb1815e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.195/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18e27bc-46ec-c056-93f8-0000e8f75e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/log","pattern":"[url:value = 'http://176.65.139.195/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4461133a-fb20-9cd5-34d3-000086d035f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traffaarch","pattern":"[url:value = 'http://176.65.139.195/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cca24-358d-f2ec-4f69-0000039e4b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/wd1337","pattern":"[url:value = 'http://176.65.139.195/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b04d9f2-9e58-dbae-5556-000015a158d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/syst3md","pattern":"[url:value = 'http://176.65.139.195/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dee19a-527f-21af-2f3f-000022fc45e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/proot","pattern":"[url:value = 'http://176.65.139.195/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef9e2f9-0810-8a2a-5be2-0000e64ad629","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/proot","pattern":"[url:value = 'http://176.65.139.211/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cddae0b-9106-d52d-bd08-000030c5951d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/syst3md","pattern":"[url:value = 'http://176.65.139.211/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3ee584-0ecc-4466-e056-0000f022ecca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/oldboss","pattern":"[url:value = 'http://176.65.139.211/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b5198c-fc1e-89b6-1941-00003c5249b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/log","pattern":"[url:value = 'http://176.65.139.211/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad39ddc5-40d5-0532-1961-0000088122f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/wd1337","pattern":"[url:value = 'http://176.65.139.211/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d677a4e-fc47-32b2-5e65-00008874807e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07dfc050-84fb-bf0a-9ddd-0000455c7312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f403c114-eb77-c731-28e5-0000a4b1f943","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3d3508-1607-98c8-decc-0000003c9a5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723464b2-a00f-c478-a679-0000128935b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cd07c7-0a0a-a74e-bc4e-0000ca02edb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05335424-14b2-407a-c7bc-0000aa3552d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6947d6-44ed-0341-1bb3-0000f6240c2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd16ad1-71a8-310d-cb2b-000016fb7b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b4e98-5a03-7f1d-4b81-0000888256a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81512343-dc7b-b481-b4b4-0000246f60b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b1f0da-1f7c-574d-8b2d-0000dcb29736","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64998851-a6af-c658-edb3-0000e38138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b143e-f0b3-702a-ac13-00000894d219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660dfa22-ca5f-8420-4042-00005f5da2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/bin/support.client.exe","pattern":"[url:value = 'https://2.58.56.151/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337bd4b2-0954-fbfd-81ca-0000102fc74c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05856de8-2609-5aeb-edbd-00001e06a6f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/bin/support.client.exe","pattern":"[url:value = 'http://124.198.131.176/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e336d9-bfb6-d3c0-ea3d-0000c6316976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f42a3f-172d-a28e-eb7e-00000efa1d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.172.96.218:7777/coldcard_final.py","pattern":"[url:value = 'http://144.172.96.218:7777/coldcard_final.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df6b573-bec6-aff4-1c51-00006fad9e1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.87:35915/bin.sh","pattern":"[url:value = 'http://219.155.229.87:35915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96880b4d-6390-15a2-f63e-00008ca38972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.80.18:35873/i","pattern":"[url:value = 'http://115.57.80.18:35873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f90936-208d-f03e-f7f9-0000c1332d7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.238.55:57598/bin.sh","pattern":"[url:value = 'http://119.116.238.55:57598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c3901-cee2-656f-77ca-0000a2839fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://14.0.131.161:51651/i","pattern":"[url:value = 'http://14.0.131.161:51651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2936138b-f5ca-8f21-23a9-0000b74365ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://178.16.54.38/us01.zoom-connect-invites.us.zip","pattern":"[url:value = 'https://178.16.54.38/us01.zoom-connect-invites.us.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d61b99e-39b5-e4ab-10bf-00000c499456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.236.173:58333/i","pattern":"[url:value = 'http://219.155.236.173:58333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c299eb98-4a74-d6bc-5fd0-0000332fade3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.241.208.90/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://185.241.208.90/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f4a534-6802-7aad-c744-0000beb476ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/i","pattern":"[url:value = 'http://125.41.228.207:54336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a38cc4c-b642-63aa-6541-0000c2bb11dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/bin.sh","pattern":"[url:value = 'http://175.173.53.215:46519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4690a98-669c-42fb-0141-0000c9f79d64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/bin.sh","pattern":"[url:value = 'http://123.8.45.230:53516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3227d6b2-4d5b-90c1-a90a-000040c4b810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.53:44835/i","pattern":"[url:value = 'http://120.84.214.53:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648af908-d640-3b79-2c0e-0000327624b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/bin.sh","pattern":"[url:value = 'http://78.25.123.5:48319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a10d5e-6b79-7086-9acc-0000862baba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/i","pattern":"[url:value = 'http://78.25.123.5:48319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6300e8fb-47f3-ccb7-8421-0000db40a018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/i","pattern":"[url:value = 'http://123.8.45.230:53516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277938e0-e05d-325a-7c3f-000063d2e04a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/i","pattern":"[url:value = 'http://175.173.53.215:46519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1853b-de1e-2da5-0c76-00004db1f11c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/bin.sh","pattern":"[url:value = 'http://42.227.207.180:58373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942b8d2a-9db3-c141-929e-0000e33d994a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/i","pattern":"[url:value = 'http://42.227.207.180:58373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5800256-903b-a3c0-8188-000043c9f6bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8023e41-3401-3495-2d47-00002ae5d8e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e275b18f-7e6d-3441-202d-0000c3ae03bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/i","pattern":"[url:value = 'http://182.117.165.9:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f441c7de-eb49-cd2e-c586-0000f6016def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/bin.sh","pattern":"[url:value = 'http://190.109.228.150:37896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebcd385-0a89-4e8a-fe75-00007b4af5b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe","pattern":"[url:value = 'https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f933c8-c3a1-43bc-d5bb-00005bc0ad87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbcb0b2-74de-312e-22cc-000014be3e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/i","pattern":"[url:value = 'http://190.109.228.150:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135cbdfc-e29d-c2b9-794c-00007b1e0223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/bin.sh","pattern":"[url:value = 'http://222.142.245.198:49568/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cdbd7-0691-68e0-7ad4-00000a7d260c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.91.206.69:41124/bin.sh","pattern":"[url:value = 'http://59.91.206.69:41124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084e0fe3-1c19-901c-bb83-0000492e5b07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/i","pattern":"[url:value = 'http://222.142.245.198:49568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4bf2ae-efeb-15e6-eba2-0000e0142e88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/bin.sh","pattern":"[url:value = 'http://175.148.158.154:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a326f81c-c6a9-524e-bf92-0000ef22f151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/bin.sh","pattern":"[url:value = 'http://125.45.148.93:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1277b336-494a-4de8-4267-0000d519c57a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.251.225.122:36907/i","pattern":"[url:value = 'http://112.251.225.122:36907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3cca41-1bfb-020a-3ca2-00009b54e1a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/bin.sh","pattern":"[url:value = 'http://163.142.93.187:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941c4229-1dd5-ffa4-8d37-000015a4499d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/i","pattern":"[url:value = 'http://175.148.158.154:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b1137-2b48-2555-a1cd-0000e156df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.7.234:37031/i","pattern":"[url:value = 'http://175.175.7.234:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfeface-5346-5300-6cec-0000db112803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/i","pattern":"[url:value = 'http://163.142.93.187:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faeca1d-6de3-e449-1dfe-0000e0f3c4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/bin.sh","pattern":"[url:value = 'http://182.121.138.136:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdcdc0d-1d29-4bcd-48f4-00005e46c21e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/bin.sh","pattern":"[url:value = 'http://42.224.175.231:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1155b79c-ab31-5046-63ee-0000b0fa992f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/bin.sh","pattern":"[url:value = 'http://221.15.141.166:50250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61055ea5-2662-02fb-5f04-00007f975e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/i","pattern":"[url:value = 'http://182.121.138.136:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281aab1b-b85d-ac72-749d-00005494954f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/bin.sh","pattern":"[url:value = 'http://123.4.178.145:35087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b29c4ef-ed3c-22ee-e3e4-0000bbec581e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/i","pattern":"[url:value = 'http://221.15.141.166:50250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93563cbf-4a73-123f-cd6b-0000cb8f712e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/bin.sh","pattern":"[url:value = 'http://115.50.150.5:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--115368bc-0923-a814-786b-00006774a32a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.54.164:45403/i","pattern":"[url:value = 'http://175.146.54.164:45403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382032c2-fee2-bbeb-17b7-0000b0437301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/bin.sh","pattern":"[url:value = 'http://42.180.33.198:56646/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df1222-f995-3668-7eab-0000a12768d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/bin.sh","pattern":"[url:value = 'http://27.219.18.191:56945/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c92b9d-4bd1-3508-794e-00009575e942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.241.62:53088/i","pattern":"[url:value = 'http://115.55.241.62:53088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d2359-fd72-91fe-dec3-000071da6b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/i","pattern":"[url:value = 'http://27.219.18.191:56945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f401be0-35e3-2497-e2ef-0000827e1f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/bin.sh","pattern":"[url:value = 'http://1.62.79.200:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34cf5f0-8bde-bc1b-835b-000057132ece","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/bin.sh","pattern":"[url:value = 'http://115.55.195.102:56873/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506ddb1a-858c-ce68-a023-0000b4086269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/nels/cli.exe","pattern":"[url:value = 'http://62.60.226.140/files/nels/cli.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435be923-c04d-2445-67dc-0000bd787d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.5.187:37816/i","pattern":"[url:value = 'http://124.131.5.187:37816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec425c4-2f71-30d3-a647-0000162aad02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/i","pattern":"[url:value = 'http://110.187.193.166:37676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c168cb0-c7a0-18ae-2ed6-000052cad9e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/i","pattern":"[url:value = 'http://222.137.175.14:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b9e43b-f61b-f0cf-b7d5-000054e7727a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/bin.sh","pattern":"[url:value = 'http://222.137.175.14:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a49ed43-fc61-12b4-1325-0000627a02c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/i","pattern":"[url:value = 'http://115.51.88.28:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ebbec1-1db4-d448-f3ff-00002985019d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/i","pattern":"[url:value = 'http://219.155.125.9:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ec86b-8a13-a2db-24db-0000a4608239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.246.175:50104/bin.sh","pattern":"[url:value = 'http://110.39.246.175:50104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d89b479-1b01-19f9-4a7f-0000bb9b4604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/bin.sh","pattern":"[url:value = 'http://115.51.88.28:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3453c-3177-258a-6390-00004bd36135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/i","pattern":"[url:value = 'http://42.180.33.198:56646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1d61fb-6123-6f97-3488-00005207efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/i","pattern":"[url:value = 'http://115.55.195.102:56873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d619f8fa-1503-4f15-6e05-0000f42b700b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/i","pattern":"[url:value = 'http://182.114.255.23:39795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27166075-0421-a1fc-9e12-0000376531c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.118.60:44378/i","pattern":"[url:value = 'http://182.116.118.60:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1355b6b5-3146-e86a-503a-00009e7dd503","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/bin.sh","pattern":"[url:value = 'http://182.114.255.23:39795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f056d70-c23f-f314-539a-000000beccc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.59.112:44682/i","pattern":"[url:value = 'http://42.53.59.112:44682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d446d5e-869c-2456-d561-000033b6d65a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/i","pattern":"[url:value = 'http://1.62.79.200:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6417e625-279d-fadb-cae1-00004107106c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/bin.sh","pattern":"[url:value = 'http://123.8.90.13:33466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d40cfc-d138-893e-4f28-000065a3964a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.188.38:34593/i","pattern":"[url:value = 'http://27.206.188.38:34593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecc21aa-5bc8-a372-9384-00003ed4061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/i","pattern":"[url:value = 'http://110.36.86.83:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82232ba-9130-dced-8463-000004af2b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/bin.sh","pattern":"[url:value = 'http://182.126.248.115:38763/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f5c6c3-2ae3-56ca-2719-000037e81bf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/bin.sh","pattern":"[url:value = 'http://45.233.94.135:53401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a7679-9285-e2fd-4a34-00005d8d70d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/i","pattern":"[url:value = 'http://45.233.94.135:53401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4916d463-397d-7efe-eb19-0000af6785d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/i","pattern":"[url:value = 'http://182.126.248.115:38763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dc6019-0e1f-ebd7-ae5d-00000d19288a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/bin.sh","pattern":"[url:value = 'http://42.59.232.35:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079e64e-8f9d-19cb-09ee-0000af8f78d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/bin.sh","pattern":"[url:value = 'http://110.37.53.25:34437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d25553-6e07-d41f-421a-0000359dcf4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/bin.sh","pattern":"[url:value = 'http://182.124.253.104:42413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79226ad9-0d7c-6775-060c-00003c5c89a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/i","pattern":"[url:value = 'http://42.59.232.35:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e6601c-e178-50ca-1f67-0000cdde3306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/i","pattern":"[url:value = 'http://123.129.2.24:55703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b322f-059a-133a-007c-0000a072d97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.162:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deeecbb-d539-e5b8-1068-00008804274d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/i","pattern":"[url:value = 'http://110.37.53.25:34437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e475dc5e-0145-92af-b822-00009fb64950","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.242.210:39720/bin.sh","pattern":"[url:value = 'http://110.39.242.210:39720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d57d7-1a6b-2868-bfc9-0000812790d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/bin.sh","pattern":"[url:value = 'http://218.74.100.187:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f659ed-c50e-85a1-a4de-00006aebb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.102.26:41199/i","pattern":"[url:value = 'http://105.184.102.26:41199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0a2afd-62c7-5216-016e-0000c6d480a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/bin.sh","pattern":"[url:value = 'http://182.121.185.249:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9861cda0-d9a0-c45c-1041-000069efe09b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/i","pattern":"[url:value = 'http://182.117.10.162:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec10031-b40e-7e5c-a805-00003dbc3831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/i","pattern":"[url:value = 'http://39.73.44.67:44345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa0784c-971f-7af5-b831-0000bcc66196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/i","pattern":"[url:value = 'http://182.121.185.249:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0054c881-b2f3-ca37-4265-00007ba4fcb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/i","pattern":"[url:value = 'http://219.156.184.4:33396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ecde69-86ee-8bc8-af0a-00000577f3a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/i","pattern":"[url:value = 'http://218.74.100.187:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032bc95c-f951-7cbf-f4f5-00002754073e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/bin.sh","pattern":"[url:value = 'http://219.157.212.157:52831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ce0444-458b-54e3-ba61-00009b554a00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://tblcxmo.duckdns.org/sysorbit.apk","pattern":"[url:value = 'http://tblcxmo.duckdns.org/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445cc04a-8779-6d29-db96-0000205c876d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/i","pattern":"[url:value = 'http://219.157.212.157:52831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34babb1-5398-d3f0-6f8f-00009c172c10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/bin.sh","pattern":"[url:value = 'http://196.190.224.62:36692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6714d9ab-c97c-a81d-39b6-00006b7b5d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f56d5c6-ee42-df64-69a0-00001f136ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fc95cb-6bcf-6d22-f4c1-0000d1b1fc55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/lm","pattern":"[url:value = 'http://46.151.182.200/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e3613a-fd47-e778-f54d-0000986fcc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/script.sh","pattern":"[url:value = 'http://46.151.182.200/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7e5f69-8998-c283-90e9-000039eea80e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f050ed7-8ac7-10a2-c88f-00009259bf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d707a3e7-cc76-20d1-e60b-00004395f9d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57aed5d-2cf9-6a18-ec49-0000cb12ed0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ee36a0-2724-2e57-f59c-0000e3a046d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad20fd52-42e3-9d35-bbd5-0000013200e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac92e36-f6a1-98b6-2e8e-00003d2fafae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm","pattern":"[url:value = 'http://77.90.185.66/miraint.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c714221-0111-41b4-2475-000028b40528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/xvr.sh","pattern":"[url:value = 'http://77.90.185.66/xvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a3a8f4-2508-0c7a-cd36-00006fba5ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.ppc","pattern":"[url:value = 'http://77.90.185.66/miraint.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71670c89-987a-58d5-72da-000065f1de27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mips","pattern":"[url:value = 'http://77.90.185.66/miraint.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c2c05a-176f-878e-f2f8-00002bcd9a38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd8079a-69b5-17c3-66ff-0000c3bbb402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdf0525-fd24-bdc6-73c2-0000a1ebfafa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/hybrid.sh","pattern":"[url:value = 'http://77.90.185.66/hybrid.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311a1d09-21f5-1dd5-4c97-0000f9a9eb76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/faith.sh","pattern":"[url:value = 'http://77.90.185.66/faith.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a8e234-da10-b273-3a90-00006351b2df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bcd4f7-bcf8-f22a-c926-0000637edf25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a888f9-c5c0-db64-da8b-00006534347d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25fbe6e2-430a-a841-dbf0-00007c5b3ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655267f2-e892-424d-3406-0000edef2fcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f4334c-c44d-f67e-88de-0000c34d62d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1606e5e-48b4-392a-8749-000024986194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/boa.sh","pattern":"[url:value = 'http://77.90.185.66/boa.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0494e45-c0b4-5233-68c9-0000e3dd91ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.sh4","pattern":"[url:value = 'http://77.90.185.66/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784289c8-f588-92e6-d4d7-000019598190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12463bfc-876c-7f55-0ba8-0000eba5c495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7a24fd-df73-37d0-48af-00000852dc95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da4d4fa-e73d-2ff4-b364-000078cad45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b29897-41dc-58d3-178b-000090dd3909","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/zy.sh","pattern":"[url:value = 'http://77.90.185.66/zy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7056102b-c0cb-f1a8-9056-000008a40a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d106b9f-32f7-9542-3063-000099871866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c9d65-70fe-6d5d-83c4-000051eac48d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec85d3c-008c-5250-fbea-000043ad30bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5188e02c-7f96-f1b1-7ed0-0000783c0285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd43154-3db4-027b-4511-0000d820d282","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a72db0-f734-61da-ee1d-000059b0d712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df84b062-fb2a-9c4c-6f87-0000b135b3be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75d124b-0848-ccd4-aa08-0000e5977ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.spc","pattern":"[url:value = 'http://77.90.185.66/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96a7e5b-9e10-a9c7-eca0-000088445828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a06f79d-96bc-90ef-212b-0000b323bcc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e516ad-a14a-49ba-ce96-0000e92e286d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.spc","pattern":"[url:value = 'http://77.90.185.66/miraint.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff11993a-e931-b246-8e2d-000017b934b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.x86","pattern":"[url:value = 'http://77.90.185.66/miraint.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060c5f6d-a851-8ba3-376d-000080ec106b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b5ca40-c130-2fb2-c002-00000ef2b06d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mpsl","pattern":"[url:value = 'http://77.90.185.66/miraint.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7455c716-1755-c146-8d2b-000073677eea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.m68k","pattern":"[url:value = 'http://77.90.185.66/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51bac12-4b5b-6365-a4a1-00006303081c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.ppc","pattern":"[url:value = 'http://77.90.185.66/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd710331-7f0c-602d-ee05-0000ddf0d89d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arc","pattern":"[url:value = 'http://77.90.185.66/miraint.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ae7c0a-aca8-b78a-f488-00004b0578fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0ac153-49c8-5752-af18-0000a8b8da48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa51f68-0226-7c80-e4cd-0000d9548600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/link","pattern":"[url:value = 'http://46.151.182.200/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa01d26-2abc-9c5c-3d8b-0000e10cb077","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdcb857-ca01-a668-3817-00003efcc78b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee3d2fa-b958-9625-3984-0000c628a789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/lilin.sh","pattern":"[url:value = 'http://77.90.185.66/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e05243-2644-2a80-28d8-0000ae2daba0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/asus.sh","pattern":"[url:value = 'http://77.90.185.66/asus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fac3acd-4046-e2df-fdde-000097c87178","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52382f51-d004-fb19-3791-0000a3168188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dea8494-0690-f465-21b4-0000115c03d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8761233-4a51-0c6c-8c33-000013c9ba15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c6726e-5828-d738-5b20-0000d931df3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b866c3-fcf6-991a-a37a-000091829a20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9dcce46-f2b2-9072-ebb1-00005a7dd02a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5c076e-f0f9-ffbc-9f62-00009ba328a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4c8952-6f80-4152-407d-00000e6591b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125b1521-6ab3-bec1-19ad-000006f50703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/a.out","pattern":"[url:value = 'http://77.90.185.66/a.out']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7eed21-ec52-9445-2c65-00009194b8bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4b385f-3100-edcd-14f4-0000650708fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.m68k","pattern":"[url:value = 'http://77.90.185.66/miraint.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a99ddc-de86-dbfe-35ba-00001b006669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.x86","pattern":"[url:value = 'http://77.90.185.66/mirai.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f14aa3-19cc-e83a-e923-0000ef64c335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.sh4","pattern":"[url:value = 'http://77.90.185.66/miraint.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b117719-a16f-b633-53b9-0000ed4f12d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm5","pattern":"[url:value = 'http://77.90.185.66/miraint.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeeaa35-8ed7-8c51-5098-0000c58cf923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51f1635-fa1a-710f-6230-00004746da52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm7","pattern":"[url:value = 'http://77.90.185.66/miraint.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa6e865-9223-b44e-0751-000013783316","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e79d1c-700a-d923-82f7-00001bcb9c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/avtech.sh","pattern":"[url:value = 'http://77.90.185.66/avtech.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5058b55a-960a-7b5b-76d4-0000695f6da3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62ac34b-26b2-5bdc-d949-0000b3d56a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37dc253f-9ea2-b51e-5951-0000bcd7a92c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7305699e-95a4-aac5-f314-0000c7aef446","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea5ac1c-6db3-5668-aa7f-00004544bb26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/bin.sh","pattern":"[url:value = 'http://118.232.137.101:40783/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31826d41-a9c3-40fb-354c-000056cb558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/i","pattern":"[url:value = 'http://118.232.137.101:40783/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c92c4c-96a6-95ef-f2af-0000567f2020","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cd7d7c-09a7-43ee-b21d-0000d6d96d8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c4faf2-b8d5-6869-32c0-0000306cedbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d4a054-daab-c52b-4b89-0000b07a6901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae145e7-04ff-6520-e7f9-000002d8ea4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda2dbc4-28df-ff00-4805-000038c4a5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5206669d-35f8-dd47-2f2d-0000db79074b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38306665-2eeb-1efa-04df-0000af14b0d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33acbae8-e173-c4f2-21eb-000092cd6d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6890116a-6b33-b1d5-df8d-000012e0bb64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4515ca70-b3fe-a6fe-b049-0000fc4ff694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e734ac33-57f0-e66c-f76e-0000f15d19d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cc50f5-3290-ea2d-9001-00006f102772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7408041-dc8e-ab41-a133-0000c8717b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a570cfc6-2146-e20a-5d59-00007d331544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e4da5a-fdca-f970-d19a-000049ede5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c8e2c1-2a46-7118-938c-00009dec6277","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a266485-4232-06a0-c560-0000c014b711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f43460-f64a-9580-eb09-0000bd5b4be9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e0686e-a3ee-1d74-32c9-0000bb11a0b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacc2360-0804-5d29-6dbe-000090da77be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d71e24f-e3ef-cc45-d989-0000c4fa5fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e66afa-5867-f976-7899-00009a5e779a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df519e9-5ead-46ca-5883-000004920117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eca5e2c-eada-9c5e-a9a8-00009aa8a140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73389afd-b8b8-c41e-e8ae-0000eac67f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff08654-a5ba-4e20-a037-00004fa70eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf89482-aa68-5739-266c-0000b08cbfdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4775507b-f12b-710c-6b26-000036061abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a6d637-4919-6ccf-627e-00003d85d21f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--869e7046-4039-7994-5e85-0000b8e973ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71055cd-1327-cc94-3a2f-0000b77af96f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8472e432-bd59-e066-5a39-00005780522c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12724aef-cebe-4616-a6e8-0000e25565be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ab8a7e-9c82-5daa-889b-00002a710a11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f92c9b-7d42-2820-b760-0000f8603328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19940d0-285e-caf6-05a8-00000055148a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea5c34-4309-ff26-de2a-000081c5111a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d8969a-3818-4cb8-f7e0-0000abe10f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f6305c-7325-9d74-adef-00001a48f327","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac9cf48-747e-dae5-45fc-000024252889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f1abdd-862f-c9be-d95d-0000f66e4412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f117844-1cb7-8c95-723a-00000eb3b391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60a5053-e042-f294-e2e1-0000c0e261cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f14ae2b-5279-ccae-85a4-0000ea30a98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf747df2-16a2-74e1-ee51-00008fcf5041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a3498a-949c-e0dd-5052-000076b0dde4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd14e7f9-d435-d363-1f3b-00004586bc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5f7d3-ed37-eea2-d67f-0000f024af4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31402e9c-fd30-91f8-79cd-00007da44cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a7fbbe-80a5-9302-edd8-0000844c98e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa26403-0f87-8a12-6734-0000cf79971a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d088babb-0ebd-711e-acab-0000c03419af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/script.sh","pattern":"[url:value = 'http://46.151.182.200:8080/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c245b4ef-0878-1b2a-4bac-0000d0d70c52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc4b634-15da-efdd-e3ef-0000f9820748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d4580e-a64a-8bf7-b98c-00000d34a915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa44f95b-8aa2-9f6e-d764-000020505b28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad0ea3a-1a35-8a16-e4fc-0000ffc8ec10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48cf95-d1ba-81d4-6949-00003bcb3da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5428479-2705-9bec-8297-0000686b6b37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570d0036-1598-4522-5102-0000aa21a066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf86095-d929-769b-7c25-0000d9352ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a119a85-f270-5f72-f82d-0000f296defd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9915aa-1e8a-4d92-a4f3-00009eff5096","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aeb0e8-de1f-044c-bf41-0000862ce4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/link","pattern":"[url:value = 'http://46.151.182.200:8080/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109da79e-097e-c17f-d70f-00006c031593","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e35e54-aff2-8ea2-6443-000082f800ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8231989d-39cb-1c75-556c-0000e9fb6ea7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652465ad-9fed-96cc-007e-0000015ff0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9a095c-6f4e-889a-da9c-000050c853e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d404d92-5f6a-ce72-5827-000039ea59e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f98fa1-9dbe-0db7-6ae8-000054b6bcbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fcd2a1-4e52-d32b-4f95-00002bc96bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d37e5bf-9c46-4e56-aab4-0000a1c05eb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62356949-d0b1-565d-e17b-000069b1e74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c00400-b717-b477-3294-00000b7e424d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f963f92-d572-b630-69b4-00004b533562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78263b33-1f0f-2e05-400e-00003ce474da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/lm","pattern":"[url:value = 'http://46.151.182.200:8080/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48965463-92ea-6b15-7059-0000795c9ebe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb589533-e46f-c3bb-4711-0000bbddb915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043eb405-2efb-2276-7362-0000b375f156","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39b44e8-f141-86c4-6621-0000a04f0498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fd3d95-650f-d08b-b132-0000a64af9b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c520603a-c08f-05de-35fd-000083196e42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ba0b44-fe9c-3baf-2da0-00004ba5e3b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbee252e-d85e-f1ab-a31f-000069e43117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554bbe6f-df6b-6889-1364-00002cb5d2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcf6a82-7027-ab2e-61d6-0000820ed637","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4bd5c3-28d9-5946-48cb-00007adec4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a9209b-cff3-70cb-7e43-00003fbe2d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1dee0c-a2f5-99c5-5eb2-00005e970e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4f0c5b-120a-2d87-11b2-0000de4997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8dc415d-ddec-10de-0bd1-0000f615181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32df4f5-d28f-df4f-9d51-000072768c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea30d529-8ca9-234b-39e2-0000197c39dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2292e657-e645-3638-ed54-00008ba0dbbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7258a99-efe1-f948-515c-00008cdc62a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6744ffa6-55d0-2fcb-90c4-0000cb161ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f20d799-1ff4-7068-ce94-0000f3a3b5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09b202-d6fa-7e04-a4b5-000058dde563","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2138ad-5721-eb20-8602-00007e2027a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163dae53-d7e2-f000-4de1-0000f2600827","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef689a-75e2-9d0b-d2ab-00009963666d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7264fb43-ec5e-e3fc-cd4f-00003b3deb72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20195c38-fdc3-35b6-4b37-0000ac6b4b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d5516c-cd61-562a-923c-0000e0a23dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pppc","pattern":"[url:value = 'http://31.77.227.121/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32555d0-0c80-5ee1-bdaf-0000f5370d0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pm68k","pattern":"[url:value = 'http://31.77.227.121/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87b33b-97ff-b805-8a98-0000607ca43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/psh4","pattern":"[url:value = 'http://31.77.227.121/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bfd7ae-cc71-7aea-b86d-0000b237c8a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm","pattern":"[url:value = 'http://31.77.227.121/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f096106-1834-267e-3000-0000f5c1dbd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmips","pattern":"[url:value = 'http://31.77.227.121/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57f1a96-7e1f-1770-a4e1-00007d7f172f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm5","pattern":"[url:value = 'http://31.77.227.121/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--456760a2-7138-369c-29ff-000098a153b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/px86","pattern":"[url:value = 'http://31.77.227.121/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c764b2c-ab1c-23ae-c45d-00006fcab8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm6","pattern":"[url:value = 'http://31.77.227.121/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a93ef35-b71f-1c05-13cc-000066364f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pspc","pattern":"[url:value = 'http://31.77.227.121/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b717bba-3d96-a87f-1952-0000d776dfa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm7","pattern":"[url:value = 'http://31.77.227.121/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adba7cf-aa52-3e91-2e52-00009ec2b59b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.121/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee4b651-11d4-b750-a81b-00008cf02ef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/i","pattern":"[url:value = 'http://36.69.84.54:40914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01700e3-13c4-7d93-5496-0000dc01ae30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/bin.sh","pattern":"[url:value = 'http://36.69.84.54:40914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae7ecfa-684c-f239-5b15-000080807829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip","pattern":"[url:value = 'https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0430e0ca-f98f-0b39-fad8-000010e9957c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/i","pattern":"[url:value = 'http://196.190.224.62:36692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b0fceb-6e35-85d2-ac48-000022a96713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e12396b-7579-bb31-5c9c-00004dc99d13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bd0d3-40b2-2e04-cdd2-000080eb515b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/x86_64","pattern":"[url:value = 'http://31.77.227.121/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6a8921-5af5-ebdd-155b-00008adfc286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b5d23e-2073-7901-b8b0-0000d2866d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/ok","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c754263-e5a2-5f0b-8b8e-00005cc7988f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/bin.sh","pattern":"[url:value = 'http://42.176.120.191:54769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a829a0-fa98-ec32-9bda-0000b145ac77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/i","pattern":"[url:value = 'http://123.8.54.39:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e7cee2-0650-382e-17bc-00003507cc0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/zombie_scanner.sh","pattern":"[url:value = 'http://149.50.154.101:8000/zombie_scanner.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0aa6e3f-e212-15b9-7373-0000163ceb7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc79cdd1-d1eb-abc9-a08f-00002fb07aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm7","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0801d76d-92e7-4edc-8521-00000d077e9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mips","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b3faf2-0762-68ab-8eb4-0000fe0d09c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mipsel","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21530e90-ffff-7dc1-fc02-00006584d0bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1b2509","pattern":"[url:value = 'http://5.182.210.174/1b2509']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213eb203-c257-ae78-6ec8-0000e1a22a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81d27b","pattern":"[url:value = 'http://5.182.210.174/81d27b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c350f6ca-a828-1e7c-3d6c-000041c34134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/785c9e","pattern":"[url:value = 'http://5.182.210.174/785c9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d009ab9c-ec19-bce2-67ee-00003450d96c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/905d94","pattern":"[url:value = 'http://5.182.210.174/905d94']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d8bb7b-5218-598f-dbc7-000023ebefa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0f62ad","pattern":"[url:value = 'http://5.182.210.174/0f62ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bcebb5a-85f6-8aa4-5062-0000eeb07657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/becf65","pattern":"[url:value = 'http://5.182.210.174/becf65']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393d9097-2afa-a9da-d2c2-000025032de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/08bac6","pattern":"[url:value = 'http://5.182.210.174/08bac6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881fae9e-dd8a-cccb-fdcd-0000be774c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0a2c7","pattern":"[url:value = 'http://5.182.210.174/c0a2c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39108bd7-82ef-b0eb-bf06-0000b97037c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/813df0","pattern":"[url:value = 'http://5.182.210.174/813df0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2917f8-230f-3c35-357b-000008907b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/53ffdd","pattern":"[url:value = 'http://5.182.210.174/53ffdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddf6701-598b-939d-5e42-0000c9641d21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0589f","pattern":"[url:value = 'http://5.182.210.174/c0589f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169437be-dbb6-3ccb-6ce6-00005cd361cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d650b","pattern":"[url:value = 'http://5.182.210.174/0d650b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c017b42-674a-f623-2914-00003ca48cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/567d74","pattern":"[url:value = 'http://5.182.210.174/567d74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387e8b1b-266d-f100-59bf-00008bcf14bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/531853","pattern":"[url:value = 'http://5.182.210.174/531853']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2974784b-79bd-bef9-745d-00003837617d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/587199","pattern":"[url:value = 'http://5.182.210.174/587199']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d79aed6-917c-052d-e27c-0000642f54ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c2baf","pattern":"[url:value = 'http://5.182.210.174/4c2baf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3167fb-c5db-f315-2a01-0000368524cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1067f5","pattern":"[url:value = 'http://5.182.210.174/1067f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aa2f8e-aa1d-4952-9f56-00003bc20188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d1847","pattern":"[url:value = 'http://5.182.210.174/1d1847']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a778702a-243c-bb0f-5693-0000b04d06c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2301d","pattern":"[url:value = 'http://5.182.210.174/a2301d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3240eabc-5995-97c5-97cc-0000ea7f181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1882a","pattern":"[url:value = 'http://5.182.210.174/d1882a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446718-6c73-b3cb-6144-0000bd4ecfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae64e3","pattern":"[url:value = 'http://5.182.210.174/ae64e3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03084e34-0961-57c8-17ab-0000b735e258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5f61f","pattern":"[url:value = 'http://5.182.210.174/a5f61f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9e67be-d40c-762d-c2b9-000006bdd58c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bba45d","pattern":"[url:value = 'http://5.182.210.174/bba45d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3e098-6795-75aa-17bd-000046d2dcfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110dc2","pattern":"[url:value = 'http://5.182.210.174/110dc2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073636f5-871b-89eb-7dc5-000001dff07e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.232.72.245:48281/i","pattern":"[url:value = 'http://45.232.72.245:48281/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3309eb45-60e0-b6a1-7005-000046719835","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/bin.sh","pattern":"[url:value = 'http://120.28.193.113:47622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0042c6a4-1690-2dee-1677-00002f75e066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/i","pattern":"[url:value = 'http://120.28.193.113:47622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24feea20-06a8-1818-2718-000032afc717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/bin.sh","pattern":"[url:value = 'http://115.56.57.92:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6656e4-ff0b-4ea5-f35d-000012ad0312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D","pattern":"[url:value = 'http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b125705-29ab-84ba-e990-0000f4fe3df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/bin.sh","pattern":"[url:value = 'http://42.58.118.214:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e56d380-b640-e00f-77e7-00003d5e3c6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/bin.sh","pattern":"[url:value = 'http://115.55.130.196:43005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f10f9e-e56e-0030-1c70-00004ed90ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/ok","pattern":"[url:value = 'http://31.56.209.189:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e482aef-6993-b697-4c36-000041a4d797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/ok","pattern":"[url:value = 'http://31.77.227.130:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b62ec2-5395-19bd-c95d-00004f58188c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/i","pattern":"[url:value = 'http://115.56.57.92:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49d6c35-2f79-4bf8-4cac-00009120a963","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.149.147:58354/i","pattern":"[url:value = 'http://42.224.149.147:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d548f8fe-410c-48c4-4496-0000ef4eb9b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/i","pattern":"[url:value = 'http://219.155.168.189:41959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6ce778-fcab-27ac-e1c3-0000fbaf3430","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/i","pattern":"[url:value = 'http://115.55.130.196:43005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2544ee-cd28-94bd-06b5-0000881be65f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/bin.sh","pattern":"[url:value = 'http://210.208.110.51:46526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c072d-ae4b-8c78-db38-0000f4c80b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/bin.sh","pattern":"[url:value = 'http://219.155.125.9:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a2f35d-1505-51b1-8f8c-0000975b88cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/bin.sh","pattern":"[url:value = 'http://123.9.66.12:35690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9b63e3-0e2e-5581-fcca-000076df5910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.253.249.237:5001/dip.exe","pattern":"[url:value = 'http://80.253.249.237:5001/dip.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453de80e-b941-6b9d-d1a4-000030275d14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/bin.sh","pattern":"[url:value = 'http://42.53.3.62:57366/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0860731-c0f7-5c5b-9c9d-00009a457a7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/bin.sh","pattern":"[url:value = 'http://219.155.168.189:41959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545497f-bd21-8074-d99b-00008cd62bd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df64a3","pattern":"[url:value = 'http://5.182.210.174/df64a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dea911b-b8d3-99dc-9088-0000cc80b95f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d9fc8c","pattern":"[url:value = 'http://5.182.210.174/d9fc8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197c36f-e183-9599-299d-000039414b78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8c2153","pattern":"[url:value = 'http://5.182.210.174/8c2153']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648b0486-86a4-0461-8223-00000fc8bd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ce4957","pattern":"[url:value = 'http://5.182.210.174/ce4957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b748d-bb68-bb66-609f-0000aa71f9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2a6c","pattern":"[url:value = 'http://5.182.210.174/7b2a6c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274d5aab-f4ec-6cc5-fdce-000069627ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878e23","pattern":"[url:value = 'http://5.182.210.174/878e23']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae78cf1d-3eeb-7f02-df37-0000f23447ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cabc7a","pattern":"[url:value = 'http://5.182.210.174/cabc7a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbb5a74-81c9-6409-82d8-0000bb695a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a12c22","pattern":"[url:value = 'http://5.182.210.174/a12c22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdb5006-6c59-2128-161f-00005b416f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2059d3","pattern":"[url:value = 'http://5.182.210.174/2059d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306d25ce-5c64-483c-d1ef-0000b4b733d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/73c8e4","pattern":"[url:value = 'http://5.182.210.174/73c8e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41de2f7e-073e-e17a-29dc-0000d96ec70b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1ad6dd","pattern":"[url:value = 'http://5.182.210.174/1ad6dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d66a88c-3ec4-9372-26e8-0000de56558b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a7a53e","pattern":"[url:value = 'http://5.182.210.174/a7a53e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cb14cc-c565-0dcc-90cc-00004edbe660","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/ePSDxHP52.bin","pattern":"[url:value = 'http://185.29.10.11/ePSDxHP52.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6427e730-e559-9138-bddf-00006428701a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Menneskevrdige.csv","pattern":"[url:value = 'http://185.29.10.11/Menneskevrdige.csv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c784188a-29ca-467d-77d7-0000701a045f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.48:48702/bin.sh","pattern":"[url:value = 'http://123.129.131.48:48702/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc4177b-a63d-a6b9-d797-0000355840fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/oojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/oojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde629c3-3c2f-3530-645f-00006ab0b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2212531a-990b-22aa-62c4-000087e81cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/newcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/newcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6570e2-7fa6-272e-f4d8-00004cf7addf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/KDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/KDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29da7776-b283-7d11-c737-0000a272859e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojdcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojdcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddde9dda-b7bb-5b66-c4ba-0000d1ecfe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/U1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/U1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91cfa744-53f2-9db3-e236-00006978952c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310bb013-71aa-9a6e-d258-000099012f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e69140-2824-c374-42a9-0000a5df34fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/Ecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/Ecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1efbd70-ed66-a9d6-0a55-0000c1590223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/cryptede.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/cryptede.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3019f306-92e3-d7b3-60a8-0000ab012392","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc55aa0-02a5-3099-48e2-000086549b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5048f0cc-93a9-b697-a2e5-0000007802c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2bea45-251c-fe69-3677-00008a0ae83e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aaacrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aaacrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e340a5-712b-5836-7f3b-0000e2bf2676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://archivoscrosoft.com/newrem.png","pattern":"[url:value = 'http://archivoscrosoft.com/newrem.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355d03a0-b7c6-0cab-bd07-000013f96671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/cat.sh","pattern":"[url:value = 'http://31.77.227.121/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0338dc-5a6b-2a2c-895b-0000fe736421","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/k","pattern":"[url:value = 'http://31.56.209.189:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20df9246-9ff5-7833-559e-0000d57a9321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/i","pattern":"[url:value = 'http://42.53.3.62:57366/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f420da29-80cb-498a-566c-000083533568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/k","pattern":"[url:value = 'http://31.77.227.130:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2685b0-8271-ca9a-adb5-0000a5d15223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/AFrlKy223.bin","pattern":"[url:value = 'http://185.29.10.11/AFrlKy223.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f82cdd4-bac8-84f0-b0fb-000003149302","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Supersensitizing.hhk","pattern":"[url:value = 'http://185.29.10.11/Supersensitizing.hhk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c813dfa-03b7-f461-fa0d-0000bc7248ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/i","pattern":"[url:value = 'http://115.53.209.13:43098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8880f18-6649-930c-592a-000082b8a063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/i","pattern":"[url:value = 'http://123.9.66.12:35690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf1b047-d3e3-9882-7446-0000afdcb224","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5371da7e-a2c0-6925-8141-0000f6cc6c98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326a4276-b6fc-40fe-5ea4-0000cb22f4bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/vekselvises.asd","pattern":"[url:value = 'http://185.29.10.11/vekselvises.asd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e689d35-17d0-84a5-07e3-000051507f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/kLcvzhpr18.bin","pattern":"[url:value = 'http://185.29.10.11/kLcvzhpr18.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece04a3-cc6c-9062-9bbc-000037f88c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b","pattern":"[url:value = 'https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6310ac7f-8829-f6c6-ef90-0000b4de8921","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.148.152.143:8472/linux","pattern":"[url:value = 'http://8.148.152.143:8472/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151f0a74-1e1f-0293-8c9c-0000d0696048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://without.kesug.com/img_051425.png","pattern":"[url:value = 'https://without.kesug.com/img_051425.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83590611-fc78-8092-acb2-0000ad7fc2bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.149.187:51152/i","pattern":"[url:value = 'http://115.56.149.187:51152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1a7734-3556-0f34-581d-00004a081e04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417e0c2c-c4e7-ad43-6f97-0000de29e95c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://essizs.com/img_170232.png","pattern":"[url:value = 'https://essizs.com/img_170232.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c27458-c810-18be-7ff8-0000a8e02529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/75/wemadegoodthingsforbestforever.hta","pattern":"[url:value = 'http://204.44.69.222/75/wemadegoodthingsforbestforever.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb2da34-9e71-bc6b-3df2-000089acf7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_PRO.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0714a329-a58e-7a6e-612f-00005c1a0391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/saraka/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/saraka/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71197e0-1ab1-54fe-0977-00000924a9c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a009a8-988d-8b7e-ae65-0000240951ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f8eb5e-75aa-7abc-7b55-00009cb81668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png","pattern":"[url:value = 'https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5141ecc-43b3-4e2e-fc9b-0000a258c1cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.180.221.132/GMT/PAPAcrypted.ps1","pattern":"[url:value = 'http://38.180.221.132/GMT/PAPAcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698633aa-f33b-9289-c2d1-0000d029de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:53976/i","pattern":"[url:value = 'http://109.236.44.113:53976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010494a3-0d1f-8957-4adc-00003d082d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.109:54758/i","pattern":"[url:value = 'http://182.126.95.109:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b189c73-5d9b-66ec-78f9-00006c59cecc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.121.5.157/abc.sh","pattern":"[url:value = 'http://85.121.5.157/abc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f183c01-6931-e0e1-9f48-0000952bce1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/i","pattern":"[url:value = 'http://83.68.248.254:34464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11229e6b-3249-7617-ca30-00008a56870e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/bin.sh","pattern":"[url:value = 'http://83.68.248.254:34464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff66c82-6a83-a84d-ff64-00008b51f96d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/bin.sh","pattern":"[url:value = 'http://110.36.1.200:43003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067f68fb-99a6-1d06-37b5-00002079549b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/codu","pattern":"[url:value = 'http://193.23.118.161/codu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f749494-c3d0-2066-17ce-00004c29af26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.130.68:34461/i","pattern":"[url:value = 'http://105.186.130.68:34461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04584c89-79fd-3ae7-e871-000023eebc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/bin.sh","pattern":"[url:value = 'http://101.109.243.237:40041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6c75d9-9877-7b1a-0f8f-00006062ebff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/i","pattern":"[url:value = 'http://101.109.243.237:40041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d499666-0664-f73a-c4d4-0000903726e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.246.20.26:46242/bin.sh","pattern":"[url:value = 'http://112.246.20.26:46242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9a918b-8fdd-99ae-8def-000061967092","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/bin.sh","pattern":"[url:value = 'http://59.103.116.68:42561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcbf35-3c49-a5b4-2aa9-000001806e4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/bin.sh","pattern":"[url:value = 'http://119.114.153.10:37040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2d54fa-0024-1e0c-5ebc-0000d72d7776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/i","pattern":"[url:value = 'http://112.198.239.2:51852/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d7bf10-1578-7a76-0e16-000093ba13f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/bin.sh","pattern":"[url:value = 'http://125.41.228.207:54336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50424957-b5eb-3ede-4b29-000024eca93b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/i","pattern":"[url:value = 'http://124.6.185.132:48257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077a9fa3-48ab-6b68-cb1b-00006941a867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/bin.sh","pattern":"[url:value = 'http://60.18.9.255:60894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a007ab-28c4-0682-e329-0000b8ccc217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/bin.sh","pattern":"[url:value = 'http://112.198.239.2:51852/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62de2136-91e4-a064-d5ad-0000396436de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/i","pattern":"[url:value = 'http://115.48.148.140:53929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a5ae05-9ab2-3167-f123-000064854135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/bin.sh","pattern":"[url:value = 'http://115.48.148.140:53929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40bdd6d-c946-5e5e-8c84-0000173d7fb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/i","pattern":"[url:value = 'http://110.36.1.200:43003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e34e8fb-da83-c22b-76d8-0000faf454b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.54.119:55125/i","pattern":"[url:value = 'http://125.44.54.119:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8288530a-b4a6-8dce-0ab5-00008b14c57f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.130:40967/i","pattern":"[url:value = 'http://210.208.110.130:40967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d3c90f-675f-7c67-465d-0000fac8ed5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/bin.sh","pattern":"[url:value = 'http://180.191.122.115:56431/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca0a841-28e0-9045-22f9-0000352637fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/i","pattern":"[url:value = 'http://111.164.68.144:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa51144b-366d-b01f-433a-0000ba7b9112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.231:50864/i","pattern":"[url:value = 'http://27.37.100.231:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fd1cbf-00bc-477e-760f-00001f0f2f09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.192.200:49600/i","pattern":"[url:value = 'http://123.12.192.200:49600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4bac3d-3726-6eaf-6907-00003b79586a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.174.167:52736/i","pattern":"[url:value = 'http://42.227.174.167:52736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7cfb84-a3bc-bb4b-fc43-0000bcb1f3ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.13.28:44703/i","pattern":"[url:value = 'http://115.63.13.28:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b5596-ab47-8977-a2f0-00002b2ab068","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.6.209.122:60543/i","pattern":"[url:value = 'http://42.6.209.122:60543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f72e2c-4955-059c-2893-0000edff940f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/bin.sh","pattern":"[url:value = 'http://42.7.146.107:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc02b54-90d9-c39e-6b53-000072d7fca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.16.92:47673/i","pattern":"[url:value = 'http://175.107.16.92:47673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5d1e30-a57d-9a5b-c615-00001186b243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/i","pattern":"[url:value = 'http://115.63.14.209:33264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04967bad-3e69-b21b-aa63-0000f0711dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/i","pattern":"[url:value = 'http://180.191.16.24:34228/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174522f5-ab79-7d0e-43af-0000e67d07bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/bin.sh","pattern":"[url:value = 'http://27.215.126.58:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d5d4a1-8688-a875-a037-00003f215419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/bin.sh","pattern":"[url:value = 'http://219.155.225.195:37800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b295e6-e2cc-247f-9d34-0000704045cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/i","pattern":"[url:value = 'http://210.208.111.26:56098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d2da56-e332-c1b7-2682-00008f4d8944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/i","pattern":"[url:value = 'http://219.155.225.195:37800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd18ecd-6feb-8809-26f9-000039d51715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.248.117:34689/i","pattern":"[url:value = 'http://110.39.248.117:34689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11e3a8d-2f5e-b469-a7fa-0000c23d2ec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/i","pattern":"[url:value = 'http://182.124.253.104:42413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827b9954-d222-ded5-6a0b-0000f8975aa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.34.109.121:35275/i","pattern":"[url:value = 'http://118.34.109.121:35275/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043dd0f6-0c63-b992-9dc1-00009c6fc3c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/bin.sh","pattern":"[url:value = 'http://115.50.50.133:53842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f282c0c6-5eb1-d8ff-016a-0000a9189aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/bin.sh","pattern":"[url:value = 'http://115.49.31.72:58726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e8d3fb-7cc5-db4b-0707-0000492325ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/i","pattern":"[url:value = 'http://140.237.37.41:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee91af9-f8b6-1a43-c147-00002798ad18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/i","pattern":"[url:value = 'http://182.112.245.250:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6e27af-141c-ef03-4c93-0000569da1f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/i","pattern":"[url:value = 'http://115.49.67.185:47193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e229be20-9da3-5982-408c-0000f4cf18f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.173.181:58197/i","pattern":"[url:value = 'http://42.231.173.181:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89579714-3437-f7df-859b-000024569601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/i","pattern":"[url:value = 'http://180.191.122.115:56431/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaa945a-1f2f-1551-16d4-0000b673eb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/i","pattern":"[url:value = 'http://42.231.67.26:56479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6fa0a8-ebb2-2b3f-63cc-00005017897a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/bin.sh","pattern":"[url:value = 'http://116.138.244.27:55282/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b4e76c-e2a9-8a0f-e826-000068886574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.17.247:35288/i","pattern":"[url:value = 'http://219.155.17.247:35288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5da96f-42dc-30df-be8b-0000dde2e371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/bin.sh","pattern":"[url:value = 'http://140.237.37.41:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e18d73-9903-1029-14a8-0000fbe1a79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/bin.sh","pattern":"[url:value = 'http://27.206.197.243:34685/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da58e7a-72b4-a584-f581-0000aeac4a07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.111.17:45464/i","pattern":"[url:value = 'http://175.148.111.17:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9f3589-49bf-a19d-3b27-0000d813299c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/bin.sh","pattern":"[url:value = 'http://115.63.14.209:33264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eafc9a47-acd0-1df5-4957-0000be0602a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/i","pattern":"[url:value = 'http://42.7.146.107:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a010d4f1-ecbd-5945-d2a7-0000b8934c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/bin.sh","pattern":"[url:value = 'http://111.164.68.144:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae6c07-2fd1-9da0-0977-0000091ff91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:41764/bin.sh","pattern":"[url:value = 'http://78.178.118.193:41764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00469f21-f3b2-433e-8df3-0000a49f1b09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/bin.sh","pattern":"[url:value = 'http://193.31.201.20:33068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2560add0-215e-19a6-5a2d-00002fe4d347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/i","pattern":"[url:value = 'http://193.31.201.20:33068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c3af1-9a62-6496-abb1-000071d8de4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/bin.sh","pattern":"[url:value = 'http://124.6.185.132:48257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2805daf5-ed44-4862-1cb6-00004cc42da7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/i","pattern":"[url:value = 'http://115.50.50.133:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ffacb5-557a-a142-8672-00001853651a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/bin.sh","pattern":"[url:value = 'http://115.49.67.185:47193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27e0a22-102b-6a9b-f45a-000082ed6373","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.183.175:50468/bin.sh","pattern":"[url:value = 'http://123.14.183.175:50468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612ee0e3-724b-5d60-960b-0000dd7ad515","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/bin.sh","pattern":"[url:value = 'http://110.37.106.220:47631/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b180caae-6840-fb60-da80-0000fb3d8991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/i","pattern":"[url:value = 'http://59.103.116.68:42561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceaf5c6-9ccd-06b3-8029-00004840b1ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:50485/i","pattern":"[url:value = 'http://115.55.179.35:50485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c1573-b915-021e-847f-0000817529d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/i","pattern":"[url:value = 'http://116.138.244.27:55282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10067444-14cc-8ab5-14d5-000021d57965","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/bin.sh","pattern":"[url:value = 'http://110.37.44.119:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d62b392-0f06-be33-f339-000066b5d4b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/i","pattern":"[url:value = 'http://58.252.113.28:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e06604c-2e8e-90b1-bb24-00000168ffc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/i","pattern":"[url:value = 'http://110.37.44.119:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5713edf1-62be-3e79-f262-00002f1e9061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://88.254.51.229:57095/i","pattern":"[url:value = 'http://88.254.51.229:57095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02391cc-fa23-6211-9147-0000a6fee043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.238.173:38540/i","pattern":"[url:value = 'http://42.232.238.173:38540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca3c361-6914-fc40-ebb2-0000126b925a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.157.30:34623/i","pattern":"[url:value = 'http://175.148.157.30:34623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782f9ef6-3089-bb57-2ca2-0000012cd079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/bin.sh","pattern":"[url:value = 'http://61.137.193.167:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1c21b3-d80e-6166-5de9-0000abf04cc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/bin.sh","pattern":"[url:value = 'http://210.208.111.26:56098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc40850-a80d-aae4-6e2e-0000cc1ae7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/i","pattern":"[url:value = 'http://115.49.31.72:58726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13450eea-4adc-7a7a-0ae0-0000c836885a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/bin.sh","pattern":"[url:value = 'http://115.63.242.52:38396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cefc9e9-5d81-b6ce-319a-000078c83d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/i","pattern":"[url:value = 'http://27.206.197.243:34685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79cd375-04c1-270c-6e71-0000f5e0a671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/i","pattern":"[url:value = 'http://42.237.123.108:59063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60c6a35-f1f8-b5bf-486c-00004072ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/i","pattern":"[url:value = 'http://115.48.8.75:42853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331190f2-8c7e-a78e-3f6e-000059c748cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/i","pattern":"[url:value = 'http://125.112.61.39:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93551e3-a961-b7ec-79b8-0000aac183c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/bin.sh","pattern":"[url:value = 'http://42.237.123.108:59063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad88afd-0a82-b5f0-882b-0000000e8f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/bin.sh","pattern":"[url:value = 'http://182.112.245.250:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe8548-2e22-9ed7-c18e-0000960e2a91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/i","pattern":"[url:value = 'http://115.63.242.52:38396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632e49c1-ad06-6836-d21a-000099764039","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/i","pattern":"[url:value = 'http://119.114.153.10:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349b1c24-dd09-4537-750c-00004a98bc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/bin.sh","pattern":"[url:value = 'http://71.207.128.92:54954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ad7489-36f0-9fc5-81a4-0000f9a606f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/bin.sh","pattern":"[url:value = 'http://125.112.61.39:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0483798-d9ac-8f8a-b5f7-0000ef76c5c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/i","pattern":"[url:value = 'http://125.46.213.70:47197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dbadc5-2983-8715-1c23-000069bad8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.194.151:60883/i","pattern":"[url:value = 'http://124.94.194.151:60883/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686d1696-ba0e-027c-bfc0-0000227329b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.221.231.180:37749/i","pattern":"[url:value = 'http://27.221.231.180:37749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f85f118-1f3c-0b88-9ece-00007636101a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/i","pattern":"[url:value = 'http://123.13.30.198:35585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbdac37-7edd-7843-b738-000062308a50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/bin.sh","pattern":"[url:value = 'http://123.148.140.58:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f1960a-6c67-d84b-dc62-000014402fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.167.208:59256/i","pattern":"[url:value = 'http://42.239.167.208:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d7f6f7-fb4e-ad10-4705-00001eac21a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/i","pattern":"[url:value = 'http://123.148.140.58:43457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1049eaac-d693-faaf-b3ef-00008f8503e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/bin.sh","pattern":"[url:value = 'http://115.48.8.75:42853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f9c054-04d5-20e3-7ae5-000090585e70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.9.132.41:50484/i","pattern":"[url:value = 'http://175.9.132.41:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cda74a2-0728-2f2e-dafe-000003df4bb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/i","pattern":"[url:value = 'http://182.121.179.219:53168/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e9562b-c92f-de07-efd8-0000f5594c56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/bin.sh","pattern":"[url:value = 'http://58.252.113.28:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76ea7f3-5c8c-9ddb-e4b5-000008b8eee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.229.46.13:57947/i","pattern":"[url:value = 'http://113.229.46.13:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f671a93c-8e2f-1f4e-f9a7-000081c01fa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://trueinggrik.com/QuickFetch.exe","pattern":"[url:value = 'https://trueinggrik.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d10bd1-1cff-23f8-0620-00006a1d21d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.170:52720/bin.sh","pattern":"[url:value = 'http://182.117.68.170:52720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de28c8e3-30ba-75b5-0264-00006944de35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/i","pattern":"[url:value = 'http://112.240.173.194:59049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fed479b-b966-9ece-04f8-000064b35587","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/bin.sh","pattern":"[url:value = 'http://180.191.16.24:34228/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63febe48-3c19-8a78-f4b5-0000aabcc598","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/bin.sh","pattern":"[url:value = 'http://112.240.173.194:59049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a823b098-d1dd-1a8e-f376-000041d47384","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/bin.sh","pattern":"[url:value = 'http://95.106.249.19:11817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfffcae-4843-6f49-3a80-0000b29b7484","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/i","pattern":"[url:value = 'http://95.106.249.19:11817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775984fc-3781-9320-9cd4-000005f07b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://export.kesug.com/img_212250.png","pattern":"[url:value = 'https://export.kesug.com/img_212250.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef685e7a-b166-fd39-f80e-0000ca413177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/bin.sh","pattern":"[url:value = 'http://42.235.6.8:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d5e8c9-34fc-5d9f-a53a-00000a16b786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98e8365-d971-f1ed-bb15-0000a0c42903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--858e96b1-0d30-ad2f-7f86-00001df152b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d5fd1d-2273-dbba-1457-0000b723cc32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735f38d6-f348-79c1-03b5-00009139fcc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe887a5d-ad65-5171-cb49-0000a6a162dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsel","pattern":"[url:value = 'http://94.154.43.76/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340d76ee-87d9-027a-2520-000050de1afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/a.sh","pattern":"[url:value = 'http://94.154.43.76/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13df92b2-5029-416d-0dcc-000067b7481e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72754ec7-517f-4979-d2c3-00002e032221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8bbcd8-09db-1dc3-9a14-000045f69ab1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.201/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd8b90e-5af1-d7c7-534e-000043e727e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d8a224-ca33-a819-23cc-0000df0b2f7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24f6eca-7b27-a209-21f8-000075534ca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv7l","pattern":"[url:value = 'http://94.154.43.76/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80790c48-080f-12d1-7d5b-00000f931fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv5l","pattern":"[url:value = 'http://94.154.43.76/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd1f39e-dcd6-6c1b-e542-0000cdbe8095","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0158f09c-c5cc-0e22-9559-000071733c40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.201/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a7880e-1fd3-f061-62dd-000045004c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd15b32-3a44-b1be-f245-00007b0212c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc609409-1dd4-cd85-b0a1-0000a33850db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740a12cb-e1ac-2a90-73b9-0000f1ada5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a292b1-01f5-9716-74a8-00004b45fb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mips","pattern":"[url:value = 'http://94.154.43.76/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ee603a-6e91-a270-6b02-0000ffc581e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.x86_64","pattern":"[url:value = 'http://94.154.43.76/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab545f8b-dd3c-c875-7ba0-000048336512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv6l","pattern":"[url:value = 'http://94.154.43.76/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a483bb1d-2701-3ba2-b79d-00009308d0c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.246/svchost.exe","pattern":"[url:value = 'http://217.60.241.246/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b82305-433a-402c-f0ec-000089aecbc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764cac92-ce74-b4c4-46ea-00007739d718","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99623d09-36ba-9f1a-e097-000032f33672","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv4l","pattern":"[url:value = 'http://94.154.43.76/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40de9b3c-8ec4-2a4e-aafb-00002ad9f518","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/i","pattern":"[url:value = 'http://42.235.6.8:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917266c2-096a-da91-7010-0000ebf1db20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904f095d-57a1-211c-1237-0000a7b31f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/debug_main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7583c63f-9248-8391-b99a-000032504524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487500dc-0121-7388-3649-0000508a0c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554251cb-5212-6d4a-2e24-000052fe70f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7c615-38ff-c3de-ef49-00003b89624b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44725fd-63ef-e0d9-6d96-00004921a14d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa62cf24-c9af-240d-63cc-000024ec60cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745bfd58-9d30-2035-6b4d-0000cb722d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/debug.dbg","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a5ec7f-3f1d-fb69-0485-0000ffac8117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18bf2c3-5ae7-37a5-762b-00003b7fb491","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097f4168-b2cd-a189-f5b7-00009b6acdd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec76c6f-c2fd-7af4-8e5a-00007bb5bae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29dfdca9-3400-ba2a-b28c-0000193e663e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed8ec3f-0d9c-81a3-dd3e-0000a182015b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48b9849-1329-8b05-81b4-000048cfa9af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca7f664-2793-696c-3402-0000b1fc56ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d1bd85-78d1-0b13-b665-0000b337aeb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm5","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35379f3-2919-e322-2c06-00004f6b4a15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/spc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c115c7aa-2cc5-a75d-b979-0000c9ff38bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb6c099-c302-6d60-afdb-0000ef4c0748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sh4","pattern":"[url:value = 'http://94.154.43.76/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3436890b-67a9-5baf-71fc-0000ddd81ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.arc","pattern":"[url:value = 'http://94.154.43.76/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c563717-f4ec-e263-4b6b-0000ff10a4e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sparc","pattern":"[url:value = 'http://94.154.43.76/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8158b4-6024-3a08-159c-0000defc7773","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.powerpc","pattern":"[url:value = 'http://94.154.43.76/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b2c817-4bb0-219b-15eb-0000cb537fdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.i486","pattern":"[url:value = 'http://94.154.43.76/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09aabc-d476-efec-c8e4-00001506ae20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ea667-ed77-79e7-c385-00004bb32db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.m68k","pattern":"[url:value = 'http://94.154.43.76/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f17f9e-bf97-e33c-6aa5-000061e677ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.76/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0156c4a4-aed2-a74b-8a82-000007995698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/bin.sh","pattern":"[url:value = 'http://60.189.111.145:37976/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df82d7c0-5dca-28e2-4bc7-0000a81662e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/k","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8952d1-9b97-9499-ddc2-000064d41ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/i","pattern":"[url:value = 'http://60.189.111.145:37976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba62983-d69f-1898-57e9-00006cf679ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:43963/i","pattern":"[url:value = 'http://112.238.178.200:43963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bdc8ee-3e8b-f462-528c-0000e1f92ae2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/bin.sh","pattern":"[url:value = 'http://110.39.228.78:49446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1daab-b97b-6820-aba1-0000ab583801","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/i","pattern":"[url:value = 'http://110.39.228.78:49446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8088f-5c24-4836-6bd3-00007817f9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7646424755/gX8992r.bat","pattern":"[url:value = 'http://62.60.226.140/files/7646424755/gX8992r.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1764f6f-4da5-4e2c-5627-0000797a4e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.103.246:42822/i","pattern":"[url:value = 'http://27.37.103.246:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4784a5-768a-6257-2598-00009c925325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e33c49e2-c0e5-40d1-c228-000050c4c948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/tzb10mmujurn","pattern":"[url:value = 'http://192.162.199.249/tzb10mmujurn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b1818c-5b16-5b38-5a1e-000082a78ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/y6b3fuzj0w6pt97e","pattern":"[url:value = 'http://192.162.199.249/y6b3fuzj0w6pt97e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fa3049-1504-c64a-4761-00000913de02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/x86","pattern":"[url:value = 'http://154.90.70.23/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3a53a6-e4c5-380e-482b-00007e19b387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/m68k","pattern":"[url:value = 'http://176.65.139.228:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df672c76-16bc-09c2-bf60-00004eedcec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b591a12b-2a30-f7fd-7785-0000f07ac260","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/sh4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466e7dcc-de1f-3a7d-7162-00005c586128","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm7","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c3437c-3428-5f86-c288-000070a45b96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/ppc","pattern":"[url:value = 'http://176.65.139.228:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31694d5a-1623-a468-e947-0000e4e4064d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm6","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52af87b5-4d1e-2aee-b7a3-00000548c9f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/ezaenul9","pattern":"[url:value = 'http://192.162.199.249/ezaenul9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f2041b-793f-a589-f96d-0000d3da5f7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/8w6vq50fsu","pattern":"[url:value = 'http://192.162.199.249/8w6vq50fsu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b86782-4516-31ce-8d27-0000f9c14cab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/1edjop4tlj2d","pattern":"[url:value = 'http://192.162.199.249/1edjop4tlj2d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f8db96-22e7-47f5-df20-0000dc42e727","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/zeb8cgwmkkpvu7pc","pattern":"[url:value = 'http://192.162.199.249/zeb8cgwmkkpvu7pc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b38603e-de12-5504-7499-0000977c5e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/1vo6lm4y50k3ww0f","pattern":"[url:value = 'http://192.162.199.249/1vo6lm4y50k3ww0f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2751215c-744e-dc03-619d-00000123e6dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://flooriscoveringworld.com/BOBBIN.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/BOBBIN.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c07062e-ca17-24a6-538d-00000e9b1c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1558f4c-ed87-f732-bb1a-00002aec1034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/8jot5vdohds0imt4","pattern":"[url:value = 'http://192.162.199.249/8jot5vdohds0imt4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe878897-1068-3ab9-7c5d-00008cacefe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/bin.sh","pattern":"[url:value = 'http://61.53.219.139:36865/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc69ef81-bfed-d96e-5d46-0000f909021a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/i","pattern":"[url:value = 'http://61.53.219.139:36865/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7016cfd9-0541-011f-3877-0000ce9835b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/bin.sh","pattern":"[url:value = 'http://175.146.6.50:52389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90859175-6110-68c9-9f72-000053c42371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/bin.sh","pattern":"[url:value = 'http://123.14.73.174:46201/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--388a4911-a741-a516-79bf-0000c54412a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.67.33.209:34699/i","pattern":"[url:value = 'http://80.67.33.209:34699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd49391c-17ea-19c6-0d04-0000e0ce6b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/i","pattern":"[url:value = 'http://123.14.73.174:46201/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee7b6c-fff5-e001-549d-00003ec21826","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/i","pattern":"[url:value = 'http://175.146.6.50:52389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de07606-1620-0deb-d576-000029940589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.59.112:44682/bin.sh","pattern":"[url:value = 'http://42.53.59.112:44682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b1fb6-a058-b60d-2a67-0000044641af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/bin.sh","pattern":"[url:value = 'http://196.189.3.1:42472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d3c2e3-8444-2cf3-c135-0000b9c41d60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f9c7b","pattern":"[url:value = 'http://5.182.210.174/3f9c7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb44524c-41e1-ca65-250a-000074ca8bbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/659716","pattern":"[url:value = 'http://5.182.210.174/659716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d943da75-5a81-ba9f-312d-0000324ed273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ec54e5","pattern":"[url:value = 'http://5.182.210.174/ec54e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4a6d7d-cfdb-2b0d-fc7a-0000ee050312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5f1c","pattern":"[url:value = 'http://5.182.210.174/5b5f1c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ba63bc-ba13-86cf-50e2-00005d562025","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/068f87","pattern":"[url:value = 'http://5.182.210.174/068f87']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac224e04-3e74-4f95-030d-000048e5ceb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/126678","pattern":"[url:value = 'http://5.182.210.174/126678']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fd4525-c44e-5e7c-bc49-000084f2f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b59af2","pattern":"[url:value = 'http://5.182.210.174/b59af2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab20224-54db-656a-8bb4-0000dc6b1b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/341d04","pattern":"[url:value = 'http://5.182.210.174/341d04']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448540d6-e00d-d4ea-2f7c-000010d934c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/085175","pattern":"[url:value = 'http://5.182.210.174/085175']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa5b051-3ec4-2840-b985-0000db71f8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f971dc","pattern":"[url:value = 'http://5.182.210.174/f971dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b877778-1f6b-a87b-0fc3-0000bd3685ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfde3b","pattern":"[url:value = 'http://5.182.210.174/bfde3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b794cac-6fe8-ee6a-bbc6-0000510128a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2778ce","pattern":"[url:value = 'http://5.182.210.174/2778ce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c108b07-07bb-8929-4db9-000034f90243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b0a2e4","pattern":"[url:value = 'http://5.182.210.174/b0a2e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf67f02-f05d-0013-6a0f-00000b8ba35b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b2f83","pattern":"[url:value = 'http://5.182.210.174/9b2f83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd2c507-26af-3e11-aad5-00002f69c303","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/27f7dd","pattern":"[url:value = 'http://5.182.210.174/27f7dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ae8bd9-99a9-b6a2-7075-00009f37849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1096dc","pattern":"[url:value = 'http://5.182.210.174/1096dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f0bc36-3766-6073-35c1-0000215dcfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm5","pattern":"[url:value = 'http://154.90.70.23/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfedd1a-9bed-28d0-9fc3-00008b54072d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm7","pattern":"[url:value = 'http://154.90.70.23/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1d183c-bf7b-cb64-72d6-0000381aad86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b318c0","pattern":"[url:value = 'http://5.182.210.174/b318c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e708d-ba28-a267-a9df-000025130a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a8ac8a","pattern":"[url:value = 'http://5.182.210.174/a8ac8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3347e95f-4048-e3b1-0bd7-0000f492b086","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/33d663","pattern":"[url:value = 'http://5.182.210.174/33d663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92c1251-dd1e-6a41-b792-0000d3241dc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be1fde","pattern":"[url:value = 'http://5.182.210.174/be1fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b886c7a6-99f9-8868-a364-0000a9e30358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mips","pattern":"[url:value = 'http://154.90.70.23/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411b488a-57ae-8bfc-68f3-0000aa11d758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb2746","pattern":"[url:value = 'http://5.182.210.174/eb2746']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82e8fb0-18f5-1c8c-bb82-000051e5322d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/194957","pattern":"[url:value = 'http://5.182.210.174/194957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97600ffc-1aed-9b7d-5b92-00008282b21a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/67f55e","pattern":"[url:value = 'http://5.182.210.174/67f55e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c594e6c-d26d-32a3-dab7-0000c9f6fc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c747be","pattern":"[url:value = 'http://5.182.210.174/c747be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--661ff4f7-2f23-13de-6db7-0000b92509d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/i","pattern":"[url:value = 'http://196.189.3.1:42472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5532ea74-2f2d-dc73-ca73-0000cbc8cf91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/i","pattern":"[url:value = 'http://115.57.44.181:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f13e747-9f98-7357-d75b-00001422fa71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.231.45:33771/i","pattern":"[url:value = 'http://105.186.231.45:33771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1a335-2f5d-3ed5-3541-0000a2286f44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/bin.sh","pattern":"[url:value = 'http://115.48.136.66:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86da0bb-dea6-cdb1-4bf9-0000a079f5ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c5f370f-3d96-617d-daf6-000094f9eede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d26c3c-4c4c-fa93-d56d-00007892ce3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/i","pattern":"[url:value = 'http://115.48.136.66:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830ed02e-ee55-810a-f724-0000a025c6df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.188:46150/i","pattern":"[url:value = 'http://182.117.68.188:46150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59aae0c9-7e32-1aa0-7356-000002755122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/i","pattern":"[url:value = 'http://138.204.196.136:51078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9c1449-1429-d529-b553-00005c2afb77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/bin.sh","pattern":"[url:value = 'http://120.84.214.85:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac6a726-0f99-9d5d-f59c-00005bf7329d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/i","pattern":"[url:value = 'http://120.84.214.85:32896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349ff24-127f-5a05-1ec0-00005716aff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.72.79:33457/i","pattern":"[url:value = 'http://182.120.72.79:33457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bbb9bc-5a5d-554f-1656-000051863dda","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/bin.sh","pattern":"[url:value = 'http://119.185.241.8:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176b9e53-1f92-9346-34ae-0000af2eca14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/i","pattern":"[url:value = 'http://119.185.241.8:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d728e9-9360-f566-2fab-000017af4785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.168.69.141/p.sh","pattern":"[url:value = 'http://83.168.69.141/p.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2dbe79-4799-f8e5-057a-000090cfc9ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/bin.sh","pattern":"[url:value = 'http://42.225.56.37:44489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b4859d-8fac-ae6c-258b-00008b457561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/i","pattern":"[url:value = 'http://42.225.56.37:44489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21e1f45-899b-b270-a66b-0000b572398a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/rvn.exe","pattern":"[url:value = 'http://178.16.54.109/rvn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fba5bde-25b9-66ae-3f9c-0000019a8386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/bin.sh","pattern":"[url:value = 'http://123.8.54.39:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e88501-b3ac-f3c4-db65-00001d91296d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ccd071-253d-9ee9-2f9a-0000b2af0c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:48818/i","pattern":"[url:value = 'http://196.189.35.172:48818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b498b6-b2f9-5049-5ab3-00004031b0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.94.15:56422/i","pattern":"[url:value = 'http://163.142.94.15:56422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fee29e-6a9d-e1a2-2e85-000035b69e36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda73828-68d9-2449-8756-00009d05d88b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278e7475-5517-6ee2-b239-0000e71ffde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.93.89.72/wget","pattern":"[url:value = 'http://185.93.89.72/wget']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33844ca-affa-ea1d-e7f5-0000d4596404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ca43c-a0b5-1318-a239-000021b44c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf40cd4e-d480-475f-f25a-000086fa0d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a36910d-a85f-f699-96fe-00005b4ef805","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/iokasg181fteasmm.nce","pattern":"[url:value = 'http://151.241.154.105:8888/1/iokasg181fteasmm.nce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6882a095-06cc-d7f5-f025-0000a21f6138","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn","pattern":"[url:value = 'http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc547c44-1087-ca62-ade7-00006c69c319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f38155-a727-7adf-a1b3-0000982da349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caa97b6-4112-8c17-07d5-00003da691ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45fb7d","pattern":"[url:value = 'http://5.182.210.174/45fb7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8169458-4cfd-9f51-c4cf-00007720c051","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1cc53b","pattern":"[url:value = 'http://5.182.210.174/1cc53b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db67581-99c9-f9eb-c601-000064cbaf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/140e8d","pattern":"[url:value = 'http://5.182.210.174/140e8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93fa924b-dbca-34cd-2245-000096a6d486","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86361f","pattern":"[url:value = 'http://5.182.210.174/86361f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5539491-719a-c2f3-f21e-0000efe8d8dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/938392","pattern":"[url:value = 'http://5.182.210.174/938392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06237a6a-5b43-43d2-fe76-0000c681eb50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cea41","pattern":"[url:value = 'http://5.182.210.174/3cea41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3315ae1-6430-63d4-9063-00004ddc4a1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/989926","pattern":"[url:value = 'http://5.182.210.174/989926']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c701a77a-3c37-124b-68b4-00003b51b257","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ea0","pattern":"[url:value = 'http://5.182.210.174/340ea0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7403d89b-adb0-d7df-5643-0000d5d80c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a041d7","pattern":"[url:value = 'http://5.182.210.174/a041d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b98ae7f-e564-49f5-9f77-0000658be0d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d085b","pattern":"[url:value = 'http://5.182.210.174/2d085b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d89e8f-13a1-de13-5ad2-000079d5e451","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b60846","pattern":"[url:value = 'http://5.182.210.174/b60846']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09191158-87c8-3bfe-22b5-0000a16bb17f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2fa8f","pattern":"[url:value = 'http://5.182.210.174/a2fa8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e57f7-2357-4c22-9077-00006dd1e667","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b94fb7","pattern":"[url:value = 'http://5.182.210.174/b94fb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb5917-6fbd-774f-cc39-00008ad00d3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cddd60","pattern":"[url:value = 'http://5.182.210.174/cddd60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2491f318-be7d-c77f-dd6a-00005edaa6ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/11ac33","pattern":"[url:value = 'http://5.182.210.174/11ac33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e9f3f2-d270-0b36-d5b2-0000a4710ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/428768","pattern":"[url:value = 'http://5.182.210.174/428768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b42979-7896-a574-810a-0000271cfeba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d27e5","pattern":"[url:value = 'http://5.182.210.174/7d27e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3864f346-370a-0da6-b5ef-0000f52fa3db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/533721","pattern":"[url:value = 'http://5.182.210.174/533721']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d00cf28-5a46-2094-b27b-00008e4a991a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83792e","pattern":"[url:value = 'http://5.182.210.174/83792e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3390cab-8701-7662-c0b2-0000d2eb3098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5e3a4","pattern":"[url:value = 'http://5.182.210.174/e5e3a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c022128b-cf82-0578-8703-0000b4828038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/55a639","pattern":"[url:value = 'http://5.182.210.174/55a639']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec07c45-6d01-27ba-d4b3-00009ac9fe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ced603","pattern":"[url:value = 'http://5.182.210.174/ced603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99163c40-1fea-cdd3-96cc-000003cb0459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/818df1","pattern":"[url:value = 'http://5.182.210.174/818df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979641f9-bd17-83fb-9193-0000be6d4553","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sh4","pattern":"[url:value = 'http://217.60.195.127/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff989ce-f649-6f8e-7690-000041679771","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.i486","pattern":"[url:value = 'http://217.60.195.127/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3141626-a3f2-826b-b551-0000cef41ee5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sparc","pattern":"[url:value = 'http://217.60.195.127/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c04822f-66d2-5f37-502a-0000c9bf7adf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.mipsrouter","pattern":"[url:value = 'http://217.60.195.127/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c5e7be-ce2a-76cb-c41d-0000c187c516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.m68k","pattern":"[url:value = 'http://217.60.195.127/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b5b01a-1ad4-4295-ec1f-0000ba098ac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.powerpc","pattern":"[url:value = 'http://217.60.195.127/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf89588e-fe50-8f40-d42f-0000f9db9f33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd412f","pattern":"[url:value = 'http://5.182.210.174/bd412f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d805ea1a-f84c-e429-00d6-0000313c8c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c819f","pattern":"[url:value = 'http://5.182.210.174/2c819f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a8269b-02f9-dd12-e673-00001ee3ba00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e19e6a","pattern":"[url:value = 'http://5.182.210.174/e19e6a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8807631c-7883-04d5-615b-000031feb2f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae1209","pattern":"[url:value = 'http://5.182.210.174/ae1209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49bf9a9-8b5d-9fda-b273-0000807c33cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/820635","pattern":"[url:value = 'http://5.182.210.174/820635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d5a6ba-123a-7e46-70d7-0000325b032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/85c412","pattern":"[url:value = 'http://5.182.210.174/85c412']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d244a60-d5ea-cc1e-2abd-00008a34cdcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb1880","pattern":"[url:value = 'http://5.182.210.174/eb1880']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080072b6-c20a-ad03-fee8-000028acdc70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f7598","pattern":"[url:value = 'http://5.182.210.174/3f7598']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56520bb9-ea5c-f24e-a19f-000058686974","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea1763","pattern":"[url:value = 'http://5.182.210.174/ea1763']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a843a6e7-d203-53c2-c210-00004f538866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1da29","pattern":"[url:value = 'http://5.182.210.174/c1da29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82efabf-5e60-1b0d-c2e1-000008f1f8b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/446eba","pattern":"[url:value = 'http://5.182.210.174/446eba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3978c144-9783-3341-f5b6-00000fda7f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1832e","pattern":"[url:value = 'http://5.182.210.174/d1832e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11576a1c-b774-d351-cbd9-00008b5758d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/935428","pattern":"[url:value = 'http://5.182.210.174/935428']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea0732f-ac20-b61e-2815-000015a3cde0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/i","pattern":"[url:value = 'http://162.246.26.77:54746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8136a7f-f6fb-e7ea-c4d5-0000b077a898","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://15.204.176.145/xmrig.exe","pattern":"[url:value = 'http://15.204.176.145/xmrig.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e42fd61-8984-7a5f-1088-000084a35b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.104.147/d/build_x64","pattern":"[url:value = 'http://87.120.104.147/d/build_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2342f0-595b-2442-a774-0000219a6a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://frtkvnpa.xyz/crypted.ps1","pattern":"[url:value = 'https://frtkvnpa.xyz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4ee807-4b41-58f7-87ab-0000f6fa4603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojkcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojkcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ccd6fe-958e-adb0-2e45-00000e9cf7b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/bin.sh","pattern":"[url:value = 'http://182.127.64.81:42389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841fb122-30fa-b701-bf71-0000bf6945a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/i","pattern":"[url:value = 'http://182.127.64.81:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09531390-ca7a-a1c2-4e6a-00009ae8bc8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb033d36-f41c-6055-354f-00002771c543","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?","pattern":"[url:value = 'https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b0713-af47-e262-3317-00002f320743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe","pattern":"[url:value = 'https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e686e3a1-767d-6fde-1118-00005d44f425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mbcasesores.com/tap/BBVA_pdf.zip","pattern":"[url:value = 'https://mbcasesores.com/tap/BBVA_pdf.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e470077-eade-52a1-9a33-00004d70ef36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:39029/i","pattern":"[url:value = 'http://110.36.13.229:39029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56018c1-8068-f651-ccea-0000abb2402d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/bin.sh","pattern":"[url:value = 'http://115.61.107.237:53984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad04935-20b5-bc06-e412-000071be4467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:47068/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451c9414-2d93-caa4-cbc3-0000ee755d16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/bin.sh","pattern":"[url:value = 'http://59.96.138.212:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f027648-5647-acfe-861e-00001d942615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/i","pattern":"[url:value = 'http://59.96.138.212:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f856849d-49b0-90ac-e86e-0000dc5ac77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/bin.sh","pattern":"[url:value = 'http://182.122.193.178:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ed422-d29a-922d-78de-00009d568b81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/i","pattern":"[url:value = 'http://182.122.193.178:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e714258-6967-ebc8-981f-0000739456e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.239.221:32941/bin.sh","pattern":"[url:value = 'http://115.52.239.221:32941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40c9de-86a4-203b-6817-00001f8570a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.121.142/a3f8d2/kaizen.arm","pattern":"[url:value = 'http://196.251.121.142/a3f8d2/kaizen.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f44332e-f191-ba5d-99b5-0000437fce62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/i","pattern":"[url:value = 'http://27.156.154.3:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb34f84-c198-5d2f-b103-000037c34785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/bin.sh","pattern":"[url:value = 'http://27.156.154.3:40709/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b405e4b0-afb2-f34f-d5ae-00007b50796d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/bin.sh","pattern":"[url:value = 'http://103.31.103.204:42349/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0c8acf-bc4b-f9d1-daa0-0000a65fa834","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/i","pattern":"[url:value = 'http://113.231.9.63:39328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--405af7c0-54b7-bfb8-5e0e-0000b59a1c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/i","pattern":"[url:value = 'http://115.61.107.237:53984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0551682b-cb9f-a411-acd2-000071266c67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.115.246.124:41208/i","pattern":"[url:value = 'http://119.115.246.124:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07521553-b548-3c22-ed0f-0000285c038c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/i","pattern":"[url:value = 'http://182.126.117.59:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9b44c8-8e27-7473-6829-000098024235","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/bin.sh","pattern":"[url:value = 'http://182.126.117.59:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf8967-2a0a-dfa6-a551-0000587464e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/i","pattern":"[url:value = 'http://103.31.103.204:42349/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee6d220-0c23-35ae-4192-0000365ce3d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/i","pattern":"[url:value = 'http://24.95.54.96:47647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0092fb28-3d0c-1854-fe68-00002b6198e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/bin.sh","pattern":"[url:value = 'http://211.158.166.117:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189faae8-eab7-3c19-01ea-000067df1e18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/bin.sh","pattern":"[url:value = 'http://24.95.54.96:47647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d4b0c-64b7-80a6-85e1-0000605fc526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/i","pattern":"[url:value = 'http://42.224.70.213:38527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee221c3-ceb5-17f5-adf4-0000a504fb1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/bin.sh","pattern":"[url:value = 'http://116.138.249.233:41996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad21749-2657-2037-80c6-0000e663c425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.122.152:46868/i","pattern":"[url:value = 'http://123.14.122.152:46868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c2cbc-0b31-5019-be48-000058b014db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/i","pattern":"[url:value = 'http://123.129.130.213:51777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b7db2-2789-a465-dad5-00005484e0e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/i","pattern":"[url:value = 'http://123.13.80.147:46406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288767f1-f5ee-d2b4-2f32-00001910b782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/bin.sh","pattern":"[url:value = 'http://115.55.55.83:33095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe32a482-789b-e340-ed00-0000147ba2d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/i","pattern":"[url:value = 'http://222.137.118.107:60191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c211ded0-a6ea-65ea-2a00-00000cf4b83f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/i","pattern":"[url:value = 'http://175.165.71.238:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363f3b01-1521-b12f-4819-00007f60edaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/bin.sh","pattern":"[url:value = 'http://115.50.20.6:57418/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56664bf2-4e67-fce9-0ab0-0000f56ab0e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.230.104:46320/i","pattern":"[url:value = 'http://123.10.230.104:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690fe372-d7f2-e9d8-aedd-000046ef4447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/bin.sh","pattern":"[url:value = 'http://115.55.131.216:52075/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d925b8b-0ca4-b8e9-aadd-00005e58c735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.216.12:43983/i","pattern":"[url:value = 'http://123.148.216.12:43983/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70da5c47-3781-f17d-60f7-0000f1abf709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.211.115:43071/i","pattern":"[url:value = 'http://222.142.211.115:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8c4408-23b3-e26f-3554-00008a7e51b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.139.79:39515/i","pattern":"[url:value = 'http://112.93.139.79:39515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6f9577-2a14-a0ac-8d27-000074f339b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.173.117:58187/i","pattern":"[url:value = 'http://182.115.173.117:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b759b38-49ff-0142-80a1-00006cd427bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.37:35671/i","pattern":"[url:value = 'http://120.84.214.37:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42a93d6-ee4d-93f6-3a54-0000fca51c97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/bin.sh","pattern":"[url:value = 'http://115.52.234.119:59998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b27a70-c128-5e0c-fd85-000050386efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/bin.sh","pattern":"[url:value = 'http://123.129.130.213:51777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cf24f7-46b2-07df-3f51-0000bece1ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.158.185:45619/i","pattern":"[url:value = 'http://175.147.158.185:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff92d2dd-73fd-8b14-db6a-0000dc28b6c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/bin.sh","pattern":"[url:value = 'http://124.131.164.138:48771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ecd6ae-cf5f-e943-ca04-0000594ef9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.217.164:45145/i","pattern":"[url:value = 'http://117.24.217.164:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4ce5e4-2b29-f1da-4e0d-000006fe373e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/i","pattern":"[url:value = 'http://115.209.244.81:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0674594f-e7c4-923f-caa9-0000b3a1dc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/i","pattern":"[url:value = 'http://124.131.164.138:48771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcff472a-417f-07d5-da7f-00005396b06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/i","pattern":"[url:value = 'http://119.183.53.105:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e77872-94a5-16fc-89b9-00007a8b7d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/i","pattern":"[url:value = 'http://113.239.223.235:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb75142-55ff-6c0c-7185-000071cd5687","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/bin.sh","pattern":"[url:value = 'http://113.239.223.235:54830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9efe06-a529-bd44-de82-00006d734ba7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/i","pattern":"[url:value = 'http://196.189.98.77:39424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efb68f9-7934-44ac-2033-0000c928c784","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/bin.sh","pattern":"[url:value = 'http://39.73.44.67:44345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c60ca4-acf8-5ffe-b93c-0000f4b5988a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.189.247:57147/i","pattern":"[url:value = 'http://115.55.189.247:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9267163e-07a8-81dd-66a9-000015cdcc8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/i","pattern":"[url:value = 'http://182.117.68.26:55093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7983b7-956c-5eb3-f4cb-00000d10af57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/i","pattern":"[url:value = 'http://219.156.93.123:50459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2024832f-60c2-ace2-08d4-0000ebca6b0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/bin.sh","pattern":"[url:value = 'http://123.5.124.47:46095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a70a56-c971-0d40-7f1c-00002e1ac9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/i","pattern":"[url:value = 'http://27.207.247.91:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cd339f-61ee-ba01-0a16-00001387619c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/i","pattern":"[url:value = 'http://182.120.4.111:56629/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1031a12-2423-e590-2d92-0000c2f09910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/bin.sh","pattern":"[url:value = 'http://182.121.179.219:53168/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e79d5d2-c1bb-ebd9-3599-0000afed5cac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/bin.sh","pattern":"[url:value = 'http://27.207.247.91:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13379293-7c0d-d6bf-7e4a-0000f0e90e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/bin.sh","pattern":"[url:value = 'http://219.156.93.123:50459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd4eb65-4c49-1f3a-2a96-0000865e7074","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.69.71:54203/i","pattern":"[url:value = 'http://105.224.69.71:54203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4c6477-9a64-6762-a3e1-0000db3398cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/i","pattern":"[url:value = 'http://123.5.124.47:46095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eaaf07-4ca1-0c2f-2387-00009879f86a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.248.132:46446/i","pattern":"[url:value = 'http://175.147.248.132:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7641-3fb3-5a46-5d69-00006d2f1087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.195.40:53219/i","pattern":"[url:value = 'http://112.198.195.40:53219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a987e109-1197-6926-7499-0000cf1eaaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.48.28.98:35726/bin.sh","pattern":"[url:value = 'http://36.48.28.98:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e56d36-d91a-912d-bc3e-0000d4a3dfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/bin.sh","pattern":"[url:value = 'http://182.120.4.111:56629/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4852ce6a-6e61-587c-8bbd-0000612ac108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.146.92.46:40975/i","pattern":"[url:value = 'http://117.146.92.46:40975/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b9d3d2-0a6b-aa69-9640-000062d33975","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.30.67:40773/i","pattern":"[url:value = 'http://123.8.30.67:40773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac687dd2-aec6-5357-8757-0000a3834a8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/bin.sh","pattern":"[url:value = 'http://115.55.80.26:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5618e4bb-d855-55ca-4f03-00001403fab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.121.20:34150/i","pattern":"[url:value = 'http://115.49.121.20:34150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7f3903-41dc-1d9e-d1f6-0000380e1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.54.168:47860/i","pattern":"[url:value = 'http://182.127.54.168:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7928e-2fe9-0f87-3d85-00007f73fc18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.171:36842/i","pattern":"[url:value = 'http://219.155.229.171:36842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4518711c-c8db-a604-24ee-0000c402cf1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.65.125:37575/i","pattern":"[url:value = 'http://115.52.65.125:37575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1329fc56-a31a-c26f-5a58-000066fc2162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/bin.sh","pattern":"[url:value = 'http://27.159.154.179:49141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d3377a-3483-0276-e637-000022cd8b56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.6.71:46382/bin.sh","pattern":"[url:value = 'http://119.184.6.71:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25ce3c0-3c41-7573-fd49-000072576edc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/bin.sh","pattern":"[url:value = 'http://219.156.184.4:33396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8933f8a0-b078-d45d-1b70-00004ebb12e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/i","pattern":"[url:value = 'http://115.55.131.216:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bba139a-36b3-03bf-0b1d-00004ea963e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.5.189:45058/i","pattern":"[url:value = 'http://110.136.5.189:45058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a682359-fe16-1240-5a25-00006adbceb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/bin.sh","pattern":"[url:value = 'http://115.53.209.13:43098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74866c31-d238-2366-f425-00001c4cc8c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.106.241.72:39541/i","pattern":"[url:value = 'http://176.106.241.72:39541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--492ee127-1ec4-31e0-5374-000052c7dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/bin.sh","pattern":"[url:value = 'http://123.129.2.24:55703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb5ee0c-8bb9-adb1-3cd7-0000869a2565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/bin.sh","pattern":"[url:value = 'http://123.11.11.28:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0d69c-eb3c-7092-2a2c-00004c79a4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.234.38:33146/i","pattern":"[url:value = 'http://182.113.234.38:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b8a8add-67a2-5232-d44b-0000bd26f969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.5:34195/i","pattern":"[url:value = 'http://112.198.193.5:34195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf491ad-a7af-4980-18fc-0000f75c069f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.123.46:35446/i","pattern":"[url:value = 'http://27.215.123.46:35446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbabbf8-83a2-1eb9-c710-000063244aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/i","pattern":"[url:value = 'http://115.55.55.83:33095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d22fd-2485-51fb-2f6f-000090699f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.198.107:45304/i","pattern":"[url:value = 'http://115.55.198.107:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dc52e5-508f-c3ce-02ec-00005cb7f695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/bin.sh","pattern":"[url:value = 'http://115.209.244.81:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc4a3e9-b1d6-06e1-3b36-00004b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.241.88:59418/i","pattern":"[url:value = 'http://115.52.241.88:59418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825402a8-d496-e167-e799-00007d2dbe9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.104.54:56510/i","pattern":"[url:value = 'http://112.248.104.54:56510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68eb0bb6-fc7c-683a-7532-0000e189255f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.224.99:37425/i","pattern":"[url:value = 'http://125.43.224.99:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35c0028-1e23-d616-ca17-0000a0f54f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.227.39:56994/bin.sh","pattern":"[url:value = 'http://115.55.227.39:56994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abc6a7d-c7ff-cdd2-d27a-0000f59ac21d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/bin.sh","pattern":"[url:value = 'http://123.13.80.147:46406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f842a2-6ab4-68e9-95a3-00005fa39b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/bin.sh","pattern":"[url:value = 'http://210.208.111.220:36372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a66b861-55ae-8a1e-b6b8-000035ae047e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/bin.sh","pattern":"[url:value = 'http://112.239.113.122:44773/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc95c9e4-90db-68ad-c23e-0000c0c036c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/bin.sh","pattern":"[url:value = 'http://113.230.81.126:50462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0791e46f-fb96-cdef-e6ec-00000ae75c8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/bin.sh","pattern":"[url:value = 'http://123.14.88.114:47055/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78523110-5975-e192-9fe0-0000ab68d1cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/i","pattern":"[url:value = 'http://115.50.20.6:57418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc382b-d121-8999-12c5-00001526afa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/Mozi.m","pattern":"[url:value = 'http://37.78.176.5:45921/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e77548-99bb-f835-7238-0000e6d9638b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/i","pattern":"[url:value = 'http://115.55.80.26:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c383941b-32e9-cd40-af3f-000085999478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/bin.sh","pattern":"[url:value = 'http://113.231.9.63:39328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6361d3-5e8c-2674-6e7b-0000d3e4a459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/i","pattern":"[url:value = 'http://112.239.113.122:44773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3e76e0-4be5-36c3-d5d4-0000e59056d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/bin.sh","pattern":"[url:value = 'http://123.13.30.198:35585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e4d2ce-94f9-8567-1868-00007b2e7f51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.12.14:38104/i","pattern":"[url:value = 'http://221.15.12.14:38104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a903a4e-f8dd-c1e3-32a7-00005bd4a873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.67.89:44844/i","pattern":"[url:value = 'http://182.115.67.89:44844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c788283-4c4c-7ada-aa0b-0000406ee3dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/i","pattern":"[url:value = 'http://115.52.234.119:59998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b073c176-80a3-ba0b-3219-0000bfe79775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/bin.sh","pattern":"[url:value = 'http://222.137.158.38:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3269aa0a-7211-0b57-faf3-000099674dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/bin.sh","pattern":"[url:value = 'http://222.137.118.107:60191/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80419a25-9657-5b7b-fde8-00004085d2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/i","pattern":"[url:value = 'http://123.14.88.114:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edccb81f-ec48-f9fe-170b-00005dc20b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/bin.sh","pattern":"[url:value = 'http://119.183.53.105:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88743f2d-19b7-bd13-324f-0000cb550f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/bin.sh","pattern":"[url:value = 'http://42.224.70.213:38527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ea64fa-26e4-f8ea-db52-00000d6b1618","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/bin.sh","pattern":"[url:value = 'http://42.224.99.104:58376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31a01fe-36f4-8f55-5829-0000af55d3bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/bin.sh","pattern":"[url:value = 'http://182.117.68.26:55093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6264dd02-37f3-6293-15ce-000089bb8fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/i","pattern":"[url:value = 'http://115.51.196.94:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd739f83-633a-c197-e3ea-000028d05699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.187:43642/i","pattern":"[url:value = 'http://42.230.157.187:43642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32545db-b5b6-ce38-9860-0000b3a0f0bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/bin.sh","pattern":"[url:value = 'http://115.57.44.181:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9043af08-12a5-fab5-d938-00003c2fa48a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/i","pattern":"[url:value = 'http://222.137.158.38:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa181ca0-b855-fb56-7708-0000d815dd3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/i","pattern":"[url:value = 'http://182.116.10.124:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c8af6b-d1a9-58d3-69f8-00000cd48bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.130.28:46269/i","pattern":"[url:value = 'http://196.189.130.28:46269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b59c9c6-cafe-a83c-02ec-000069db2a60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/i","pattern":"[url:value = 'http://116.138.249.233:41996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc0f71f-b197-acff-a555-000023951414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/bin.sh","pattern":"[url:value = 'http://175.165.71.238:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207d629a-7090-b3a8-7ac7-00007d8d7c0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/bin.sh","pattern":"[url:value = 'http://115.51.196.94:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1ec47c-d6db-016b-303a-0000fc04fb48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.102.135:34775/i","pattern":"[url:value = 'http://222.138.102.135:34775/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb6076a-2aac-9814-3bc3-0000dc758ba9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.117.178:50959/i","pattern":"[url:value = 'http://105.224.117.178:50959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d907592d-cd32-5ddb-014a-000031fee37a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.202.24.36:37993/i","pattern":"[url:value = 'http://27.202.24.36:37993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0018b629-7ec2-3e84-41da-00006219a9a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/bin.sh","pattern":"[url:value = 'http://182.116.10.124:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e2e0d-108d-34e0-2ba5-00007b7aa37d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/i","pattern":"[url:value = 'http://42.224.99.104:58376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7054af-b29e-fe6a-833f-0000a880b6d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.41.107:34572/i","pattern":"[url:value = 'http://125.43.41.107:34572/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba95a5e-9a14-b879-5467-00007d0ae8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.216.30:39421/i","pattern":"[url:value = 'http://125.47.216.30:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ec352c-90e7-decf-46a2-0000ceac966f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/bin.sh","pattern":"[url:value = 'http://196.189.98.77:39424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc35129-57f9-b856-d31f-00006227c7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/i","pattern":"[url:value = 'http://27.159.154.179:49141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49843208-da49-fdb5-b68d-0000fdc00717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.0:36944/i","pattern":"[url:value = 'http://110.36.86.0:36944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aca68e2-22aa-7304-537c-000088858b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.201.196:57604/i","pattern":"[url:value = 'http://110.38.201.196:57604/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b6d28d-a58d-d64d-80d3-00008c977cd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/i","pattern":"[url:value = 'http://61.137.193.167:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bae7dc0-4928-fc00-05a5-0000ce265a21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/bin.sh","pattern":"[url:value = 'http://83.228.109.209:51502/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e720ba54-53c0-0a59-5d87-0000ba87a5df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/bin.sh","pattern":"[url:value = 'http://78.60.75.209:50077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c688e0-76e3-4b32-d403-0000dcc9e019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/i","pattern":"[url:value = 'http://83.228.109.209:51502/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944454b3-4667-1206-0a7b-00009c0818aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/i","pattern":"[url:value = 'http://78.60.75.209:50077/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c90e84b-c82f-7859-393d-0000ee11cd23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.152.192:37513/i","pattern":"[url:value = 'http://61.53.152.192:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992d34a7-d81b-966c-a4af-0000d6b4a150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/i","pattern":"[url:value = 'http://42.233.91.100:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5beb32-cbca-f36b-3dcb-000092aad6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/bin.sh","pattern":"[url:value = 'http://42.233.104.208:40542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef4c9c8-a683-92b6-8c1e-0000cb22d81a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.83.85:60110/i","pattern":"[url:value = 'http://42.237.83.85:60110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e2fde8-6394-50e0-c00b-0000bc91d8e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.233.154:43712/i","pattern":"[url:value = 'http://60.23.233.154:43712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--980a0c38-7fa2-3412-db17-0000926e570c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.29:40746/i","pattern":"[url:value = 'http://59.58.42.29:40746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb35e500-dc25-3aee-2a2c-000081cc86df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.114.165:55640/i","pattern":"[url:value = 'http://61.52.114.165:55640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf05026-f67d-bc69-ce70-0000cfb0d069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.202.82.19:60523/i","pattern":"[url:value = 'http://87.202.82.19:60523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522aacb3-b633-77f4-4d29-0000ea673f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/bin.sh","pattern":"[url:value = 'http://42.57.201.222:50295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702ffbd0-133d-39c3-a3e1-0000256675c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/i","pattern":"[url:value = 'http://42.57.201.222:50295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593e637b-bc7a-a8ad-db2d-00002363e789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/i","pattern":"[url:value = 'http://42.59.226.215:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748b9dd3-4e1b-a4da-685d-0000c53c604c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/bin.sh","pattern":"[url:value = 'http://42.59.226.215:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab009f55-e434-d51f-98d8-000068d83f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/i","pattern":"[url:value = 'http://123.11.11.28:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35047732-e90a-81df-d1c8-0000b48a5f4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/bin.sh","pattern":"[url:value = 'http://61.53.72.56:41711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bec07e-d6be-8a75-0b3f-00004d3a4949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/bin.sh","pattern":"[url:value = 'http://42.231.67.26:56479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02202e01-9c89-fdb5-6167-0000c5dd067f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://82.114.181.233:33360/i","pattern":"[url:value = 'http://82.114.181.233:33360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72b2c8-8d1d-cc7e-964d-000003325ee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/i","pattern":"[url:value = 'http://42.58.118.214:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e14e18d-e1c0-561b-1f34-00004024dbe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/bin.sh","pattern":"[url:value = 'http://42.235.43.180:36905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f5b951-8ef9-b7fd-2a3d-000061d81272","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/i","pattern":"[url:value = 'http://42.235.43.180:36905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433827fe-4b3e-3de6-0f99-0000b9eb11cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/i","pattern":"[url:value = 'http://42.233.104.208:40542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcef2f7-a9b8-1ed5-8f81-00001eab4cc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/bin.sh","pattern":"[url:value = 'http://42.233.91.100:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--127a2389-46c1-ca64-e4f8-000014eb8af0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.162.218.63:58599/bin.sh","pattern":"[url:value = 'http://60.162.218.63:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9b0f17-324d-1d33-20d2-00000d5aa6d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/i","pattern":"[url:value = 'http://61.53.72.56:41711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2efde2f-326c-1de7-e426-0000e86953f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.168.22:33430/i","pattern":"[url:value = 'http://42.238.168.22:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524d0a8-f650-eb23-2aa1-00009e26680d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/i","pattern":"[url:value = 'http://117.211.213.219:35115/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5663e368-afb5-21f0-00cf-0000135a4fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/bin.sh","pattern":"[url:value = 'http://117.211.213.219:35115/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855e7aa-1c6d-ee58-0a90-00002aa75db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.101.221:42822/i","pattern":"[url:value = 'http://27.37.101.221:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5906984f-a4f3-5782-a3bf-0000df4b2a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.225.130:45357/i","pattern":"[url:value = 'http://221.1.225.130:45357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3257bf6-14c2-49e8-9433-0000c2f03e45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.226.6.169:40695/i","pattern":"[url:value = 'http://105.226.6.169:40695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbd06d0-3238-94d0-cd92-00009a7518e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/bin.sh","pattern":"[url:value = 'http://175.165.110.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c240de9c-b803-f501-b292-00006918adf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/i","pattern":"[url:value = 'http://175.165.110.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33cf168f-e997-9aec-5044-0000095c73d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aktcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aktcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61376b3e-8a46-0636-2718-0000e4379a36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/UDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/UDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e95818b-8f82-58ee-feb1-0000bbeb7f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EEcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EEcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f51c5d1-34c9-f1a0-1773-0000d2dc58ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uzcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uzcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce6e81f-729b-6a4d-752d-00003cc29fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a047008-9180-6119-4039-0000d237a9c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd08581-f502-b82e-ad91-0000d4a68a8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b29c10-a582-120c-21e2-000010cbf10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/syst3md","pattern":"[url:value = 'http://ten.devurek.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d7c219-a791-9d38-4ebc-000006fa2f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cli","pattern":"[url:value = 'http://ten.devurek.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b5ecad-5741-010a-a849-00006c1670f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/proot","pattern":"[url:value = 'http://ten.devurek.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b62e5f2-3211-ccc7-c144-0000c283e5d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401efbe0-0ea4-3af8-79d7-000050d3905b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/log","pattern":"[url:value = 'http://ten.devurek.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58d8426-fb21-42c5-150e-00000450ddeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0351d79f-b53a-a248-5c19-0000d02c88da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/oldboss","pattern":"[url:value = 'http://ten.devurek.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753593ee-7783-8f0a-2190-00005bd5a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/boss","pattern":"[url:value = 'http://ten.devurek.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42eee5be-3917-ca89-9842-00005f0d5e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f696aaf1-5e48-32d2-67e6-00000df43ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cliaarch","pattern":"[url:value = 'http://ten.devurek.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8f0c5e-fa88-ea4d-a115-000043e697e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e338b0-78b8-a36e-5058-00001fb4b473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/main","pattern":"[url:value = 'http://ten.devurek.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce59a700-7d81-b3c3-f7ba-00000787861e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b80426-09f1-7b0c-3ccd-000069608187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/wd1337","pattern":"[url:value = 'http://ten.devurek.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7228ea-eeb4-0aa2-fc4c-0000b355aed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d81ae7d-2785-2d86-610a-000002649c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3411a87-bd9d-8251-a4d6-0000a1fac3d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/Error84","pattern":"[url:value = 'http://ten.devurek.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8819bc78-5a1a-3e90-8faa-0000828f35ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f3dd78-a718-e137-5562-0000beb66431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mnurlogistics.az/ind8inc/crypted.ps1","pattern":"[url:value = 'https://mnurlogistics.az/ind8inc/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1170746b-956e-fecf-57f7-0000aba2acb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/#","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/#']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bb3375-b3d8-57d8-e0cf-00000e94e014","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://malaysianpastrybakery.org/crypted1.ps1","pattern":"[url:value = 'https://malaysianpastrybakery.org/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a07d28-226c-6a25-fccf-00008e6ff641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/oldboss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1759ec-e206-8802-54ce-0000bc240f3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/boss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb79bed-2a73-36e7-4b64-000092fc7388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.57.200:55698/i","pattern":"[url:value = 'http://123.8.57.200:55698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3747d74-b0c4-37f6-d052-00006a77371f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64675331-5288-704f-73da-0000939f3001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin44.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbf1be-842e-328d-517e-00006aa22cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/TELEG.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/TELEG.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e4b240-cbed-4d71-524f-0000f57822cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/Forbes.exe","pattern":"[url:value = 'https://rcf.co.mz/Forbes.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d04367a-d227-ac51-7d68-00002361fd19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbbea79-0b26-f9fc-5d7d-0000577467cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/am11binupload.txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/am11binupload.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824336a7-9abe-cb01-c6cc-00004e888f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/syst3md","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc1f2b2-6244-c698-de5b-0000f8451ec4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/main","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc2af85-e9e9-af99-ed5c-00004f7d9f63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cli","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b0b030-b6bd-4194-e1fa-0000ffb9bd4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/Error84","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070d561a-0a17-9b10-40ad-00007797e560","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96322f72-606e-052f-39c2-000079c890eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6742af4b-f77a-adeb-79f6-000039f4a772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/proot","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0b967c-c5a8-3ff6-d6e4-000019542055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/log","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cd1ef1-df58-91bf-89d5-000071e4ddde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883fb428-7178-fd1b-f9ac-0000f4e714ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/wd1337","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2552e219-264a-cff0-0a5e-00000eac7cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/google.exe","pattern":"[url:value = 'https://rcf.co.mz/google.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edcb75f-751a-0947-994a-0000b7778afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/img_065018.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/img_065018.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79e3efa-e510-d22a-9a55-00001a571661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c421e16c-1658-9e00-f744-0000beb7a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f26619-acad-73e1-6d03-000087958288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://medicosantiagomarrero.com/services/img.png","pattern":"[url:value = 'https://medicosantiagomarrero.com/services/img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f886112c-23a1-3fc1-dc75-00009223ffd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.79/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe8dd62-87a5-d8ac-04bd-000025628b23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/flyudfg.png","pattern":"[url:value = 'http://192.109.139.79/flyudfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c7535a-6d9f-db0a-b3c8-000001cbb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.9.35.137:54934/i","pattern":"[url:value = 'http://95.9.35.137:54934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9efbe3-f913-9063-4c32-0000bf2dade9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/3xmytp.sh","pattern":"[url:value = 'http://31.76.29.161/3xmytp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f453511-d99d-b895-b63b-00004d15fb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/bin.sh","pattern":"[url:value = 'http://203.2.151.15:43360/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec627c6d-377c-10c4-90ba-0000944f2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/i","pattern":"[url:value = 'http://203.2.151.15:43360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7e7d7b-0430-e75b-2fda-000081fe99d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png","pattern":"[url:value = 'https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dafa7d1-ee04-a519-ad0d-0000df128ec3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58039e4-99c0-0f05-2af4-0000b9a133bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83da76a2-ac1b-99b3-0913-000031e92999","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f7448-6044-ea30-b7ad-000027cf7940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.x86","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c89685e-d8fb-dc4b-2211-0000ab149c53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff64274-0f70-6e8e-73ba-0000311fff43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48fd4586-8f7e-8e82-c371-00005fcc1735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e58c8-9c41-390c-ff6f-000013a8fb36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82870972-5a9f-d33c-bacf-0000011d54d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2484bd-ae74-e26a-785d-00005a1c9109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccd9887-f4e2-1bd1-1561-00004c41f6f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.189.81:42693/i","pattern":"[url:value = 'http://123.14.189.81:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb4e995-6f76-d519-71a7-00004c1e000e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.stratagemzw.com/MSI_PRO.png","pattern":"[url:value = 'https://www.stratagemzw.com/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d434940-e366-454f-ab87-00004a822c05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014220.png","pattern":"[url:value = 'https://stratagemzw.com/img_014220.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096254c2-c73a-d9d9-cb13-00001b369fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff414429-eff0-6d68-894f-00005624c339","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://dasberlinerhotel.com/wp-content/uploads/update.exe","pattern":"[url:value = 'https://dasberlinerhotel.com/wp-content/uploads/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892285fa-5d48-9706-574f-0000dfb19ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014740.png","pattern":"[url:value = 'https://stratagemzw.com/img_014740.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e526f20d-d99d-cd79-27ac-00000829d0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/40/JSload.hta","pattern":"[url:value = 'http://209.54.103.153/40/JSload.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a013820-5ef0-afd8-0cb2-0000aca38f79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js","pattern":"[url:value = 'http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c500a6f1-60fe-797b-75e1-0000b82d47e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7acf5e-ffb2-370b-f8ff-00006ee615ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/bin.sh","pattern":"[url:value = 'http://138.204.196.136:51078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909403ff-ad1d-ce6a-e451-000096a1754d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93552bb0-aadc-0670-bd2a-00005c59e33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78487ea4-705b-5c35-b186-0000e3bc2db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.x86_64","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affc214d-ca5e-dc70-4d3f-0000b4a0f046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mips","pattern":"[url:value = 'http://2.26.48.37/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968af85-b3cd-06b2-5e6e-0000797ed5f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i686","pattern":"[url:value = 'http://2.26.48.37/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d0159b-f652-3801-7abb-0000b456269c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.m68k","pattern":"[url:value = 'http://2.26.48.37/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04645390-a6d0-4337-4cb9-0000d22c568c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.powerpc","pattern":"[url:value = 'http://2.26.48.37/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87424b4e-f653-6ae9-6c1c-0000052d5391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.sh4","pattern":"[url:value = 'http://2.26.48.37/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a185891-a7f6-a2c4-63c8-000069a9d809","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv5l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--730369d0-6a97-6fa6-3765-000054c9f1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv4l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41350b52-631b-2ff0-33c3-00002e09a2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv6l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2e11dc-e065-9b38-bf75-0000ffeaa75e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i586","pattern":"[url:value = 'http://2.26.48.37/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582e3a13-8657-cf12-919c-000013698b69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv7l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e92e84-653b-8453-7d21-0000c09ba516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mipsel","pattern":"[url:value = 'http://2.26.48.37/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4ebb05-605d-5fe6-c249-000064e89c0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7d6303-2529-cf44-e4af-00009654ce7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.138.135:48639/i","pattern":"[url:value = 'http://115.203.138.135:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06e754a-b94b-f53c-89d7-000071398ca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27eb7b2-73c5-829b-e5a2-00002e950b26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99412f8d-53c0-56a5-4219-00000e5c848f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta","pattern":"[url:value = 'https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565af734-17e5-1e04-97a3-00000757c724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aa1923-d96e-a744-9926-0000637e5e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156d4097-bb53-a59f-755a-0000cf50b92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suppliers.lovestoblog.com/img_005219.png","pattern":"[url:value = 'https://suppliers.lovestoblog.com/img_005219.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45688246-2ef1-e4dc-735b-0000cabda73a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://totalfitting.com.au/super%20agent.exe","pattern":"[url:value = 'https://totalfitting.com.au/super%20agent.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dac6eae-9b99-fdc8-ef5d-0000038e9c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://midle-eastcompany.com/HypEEAugustBless2026.exe","pattern":"[url:value = 'https://midle-eastcompany.com/HypEEAugustBless2026.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46c383b-da8d-4230-eac1-00008fd3deb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://aeplled.cfd/stego/stego_7mpp3kpd10.png","pattern":"[url:value = 'https://aeplled.cfd/stego/stego_7mpp3kpd10.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d14ca21-a02f-b067-b50f-0000e636829d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/praise/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/praise/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b04b7d-2a7d-c46d-214f-000070b39b0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:58578/i","pattern":"[url:value = 'http://110.38.210.180:58578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704130ae-a0de-4a70-b045-0000f90d7241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5917492177/O0KqSEz.exe","pattern":"[url:value = 'http://62.60.226.140/files/5917492177/O0KqSEz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66b656c-efc0-60a1-8507-00007751501e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/bin.sh","pattern":"[url:value = 'http://112.248.186.110:34455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d08f45-efd8-7d63-49c6-0000b8ef5c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/i","pattern":"[url:value = 'http://112.248.186.110:34455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351e9264-9a8c-933d-c13c-000002d0f39c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de1b8b91-fb06-690b-361f-00005ab51fdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b9e45-a31b-f66e-b243-0000e780646f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b2c65b-4990-16b1-bbe9-00002c5026e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b511f344-c5e1-33ab-41b0-0000d6c4f28b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f911e690-2752-2827-f20a-00006bf1893f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7cb0d7-a19c-3b0d-b5a1-0000c1c6f50f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77ca503-7715-58ac-f42d-00007cf38ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5f2d02-b0ec-5505-c972-00002c0c8775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db2d38f-640c-f613-9496-000091655d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e9adf7-5a70-ce48-67b3-00008682b863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c76ddd6-ab9b-3940-5f3e-0000f08263eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace9b823-8e76-e8e8-25eb-00003bb7c3d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e99ee2-463f-7a68-0f00-00006804bcb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/bin/support.client.exe","pattern":"[url:value = 'https://45.83.31.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e58a57-a4c6-9103-0f16-00008c891b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e93ff5-d4b4-de56-9213-0000c6718412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/bin/support.client.exe","pattern":"[url:value = 'https://124.198.131.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f93c16-f512-a072-16a5-00005b4fa90b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f2755f-4675-86fd-861c-0000926d3203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://209.141.51.224/dns","pattern":"[url:value = 'http://209.141.51.224/dns']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae50968-53a3-c538-5fe0-0000b31072c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.53.139/linpeas.sh","pattern":"[url:value = 'http://209.141.53.139/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52b9a33-dc59-3020-42f2-0000f5498562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.76.206.4/123","pattern":"[url:value = 'http://38.76.206.4/123']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8653581-4be3-c043-3dd8-00008b6863b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/lterouter","pattern":"[url:value = 'http://160.119.71.134/n2/lterouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513b11dd-397b-a71e-843b-000093f529a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mpsl","pattern":"[url:value = 'http://160.119.71.134/n2/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e9d714-32a2-b05e-40b3-0000f8f647e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mips","pattern":"[url:value = 'http://160.119.71.134/n2/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d839a-b347-d50c-56a6-00003ae8be16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/g","pattern":"[url:value = 'http://144.31.147.198/g']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dabb9d6-8e50-2fb8-13d2-0000097163a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tr","pattern":"[url:value = 'http://144.31.147.198/tr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4f2d2-78ab-8471-6f73-0000c0f82102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/u","pattern":"[url:value = 'http://144.31.147.198/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a571e2-8d28-60d2-cd84-0000ce885ed8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/mp","pattern":"[url:value = 'http://144.31.147.198/mp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a86a84-9401-d26a-1346-000055555e72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/m","pattern":"[url:value = 'http://144.31.147.198/m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b43c8d2-d942-9d90-a227-0000968de997","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/gs","pattern":"[url:value = 'http://144.31.147.198/gs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a5d8fa-7dea-3a87-f0b7-0000a378ab2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tp","pattern":"[url:value = 'http://144.31.147.198/tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ccff27-b6cf-598c-bc71-0000c88266cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/j","pattern":"[url:value = 'http://144.31.147.198/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c5ae9d-7db8-45b4-f443-0000da37c925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/i","pattern":"[url:value = 'http://144.31.147.198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da757e7-9534-c8d1-1618-0000e5937ede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/s","pattern":"[url:value = 'http://144.31.147.198/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae065d-b6c5-3fc5-21e7-0000f726d130","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/p","pattern":"[url:value = 'http://144.31.147.198/p']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17211ce7-44a6-d6fd-61a4-0000f2c5ce9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://144.31.167.1/bin/support.client.exe","pattern":"[url:value = 'https://144.31.167.1/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e332b73c-75a0-4126-e292-0000ba543046","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/ppc","pattern":"[url:value = 'http://160.119.71.134/n2/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab92b35-bfa6-e154-6bba-0000121b947e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sparc","pattern":"[url:value = 'http://160.119.71.134/n2/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c5e3c2-914b-b2ec-b4aa-0000f8009138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/m68k","pattern":"[url:value = 'http://160.119.71.134/n2/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6789c032-9002-a925-c747-00008c0798fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv7l","pattern":"[url:value = 'http://160.119.71.134/n2/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e92f173-9263-f1ca-c4e4-0000b167b14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv6l","pattern":"[url:value = 'http://160.119.71.134/n2/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bfa2b0-b95e-bfb3-a5a9-0000f6c7cb9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv5l","pattern":"[url:value = 'http://160.119.71.134/n2/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca493f1-54a5-6367-db30-0000cba7e22d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv4l","pattern":"[url:value = 'http://160.119.71.134/n2/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8086f2-3bf4-1d58-d7ef-0000c2575e33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86","pattern":"[url:value = 'http://160.119.71.134/n2/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9660556b-10ff-262f-521d-00003a8aa9b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sh4","pattern":"[url:value = 'http://160.119.71.134/n2/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c87c8e0-ad8d-9e1c-9acc-00002d6bded7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/aarch64","pattern":"[url:value = 'http://160.119.71.134/n2/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0628cec2-4998-9fcb-b14f-0000069155bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86_64","pattern":"[url:value = 'http://160.119.71.134/n2/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336f110f-8790-466d-4940-000071fe5d79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.138.178:42032/i","pattern":"[url:value = 'http://112.198.138.178:42032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9214e701-ff34-133c-9028-0000fe519e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/tbk","pattern":"[url:value = 'http://160.119.71.134/n2/tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ad9f5f-88f7-78f5-4ce2-0000cd2865d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/bin.sh","pattern":"[url:value = 'http://196.189.197.131:44348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197733b-e2ce-fa69-bdee-0000b63163ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/i","pattern":"[url:value = 'http://196.189.197.131:44348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9701fe3e-f68d-06e9-d3a1-000027bb7106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172-104-49-49.ip.linodeusercontent.com/bot.mips","pattern":"[url:value = 'http://172-104-49-49.ip.linodeusercontent.com/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11da1c4-b49e-3edd-53d1-0000b6ca9ae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mips","pattern":"[url:value = 'http://172.104.49.49/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54016f-e9c5-3033-f7e6-0000c2e06d12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mpsl","pattern":"[url:value = 'http://154.90.70.23/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4af046-1f67-18e0-5348-000002d4fd52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.sh4","pattern":"[url:value = 'http://172.104.49.49/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8181211-621d-ac62-510a-0000820a64a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.ppc","pattern":"[url:value = 'http://172.104.49.49/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--007294d3-58fa-86a8-d355-0000d09f91c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm","pattern":"[url:value = 'http://172.104.49.49/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bb15e0-5f51-1001-78d7-00003692194c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.aarch64","pattern":"[url:value = 'http://172.104.49.49/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7565bb78-232e-fb1e-8e5d-0000947d9e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm7","pattern":"[url:value = 'http://172.104.49.49/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13108047-c83b-754a-1dcb-0000a79756d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mipsel","pattern":"[url:value = 'http://172.104.49.49/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e769a20-3c9d-2119-68e2-0000fef3b5e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.x86_64","pattern":"[url:value = 'http://172.104.49.49/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc513908-971c-f914-8311-0000e88df872","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tarkioweb.com/crypted.exe","pattern":"[url:value = 'https://tarkioweb.com/crypted.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fd00ac-7714-b232-4390-0000e7186f1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/i","pattern":"[url:value = 'http://27.207.229.26:38938/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f5b246-3047-0608-f524-00009b457e75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/i","pattern":"[url:value = 'http://182.127.69.34:57222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0efd658-4a19-b5ba-8ac2-0000710ea716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/i","pattern":"[url:value = 'http://39.73.172.141:48914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ac7794-ddb4-58b7-baa5-0000b17255e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:46269/bin.sh","pattern":"[url:value = 'http://196.189.130.28:46269/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88005e5e-c1c8-cc95-f2b6-0000b66c3646","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/bin.sh","pattern":"[url:value = 'http://117.223.141.118:49088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ba8022-2108-01ca-b2d9-0000df881569","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mips","pattern":"[url:value = 'http://150.241.65.212:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8866d3-757c-19f1-2e38-0000ab7d09a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x64","pattern":"[url:value = 'http://150.241.65.212:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6192b93-88c0-9995-b961-000019381678","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/dp.sh","pattern":"[url:value = 'http://150.241.65.212:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcbcb24-70b7-66d0-c5d2-0000ef8abef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm4","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e1039c-b874-e50c-93d9-0000fc5f8564","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc440","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3466c83-e994-60f5-8fcd-000041f220aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i686","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fed69d-22a1-fa29-063d-00008cdad3c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.m68k","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40deb026-6ca4-2905-0b76-00004d182ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mipsel","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69ff077-d09d-a0bd-9122-0000d1c454c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118c5c65-9010-64ad-a461-0000486a9127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sparc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3cd1220-cb86-6b08-8140-0000511acd33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sh4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6adc861-81de-a1ec-6521-00001627660c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm6","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a3a94d-cd53-03e6-94fb-0000bc2eae87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6462466e-a914-0434-bf2e-0000b3a04b17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc440","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c2b8ed-1385-2e27-82c8-00000c3a81a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i486","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa499db-1339-35a0-7af2-00000492c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm5","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1aaf8f7-c368-4577-663a-0000ae9b0169","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm7","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba08d1b-47cf-f276-acd7-0000bcfe4c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x64","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575df5d4-0b38-ac5e-5050-000002e7e0a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mipsel","pattern":"[url:value = 'http://150.241.65.212:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc96b4f4-2c8c-d855-50e7-0000df7ec3b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.m68k","pattern":"[url:value = 'http://150.241.65.212:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c5aa08-6d3e-c356-685d-000045837679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm6","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2577edfb-a588-76c7-267c-00006856b084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sparc","pattern":"[url:value = 'http://150.241.65.212:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b71bbf-2ea0-5047-4f80-0000c6471137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c052a71-e9e5-e558-4ee9-0000be447f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x86","pattern":"[url:value = 'http://150.241.65.212:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45aada84-e119-80a9-28a5-00005f9e91d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i486","pattern":"[url:value = 'http://150.241.65.212:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaccfbb2-592b-b7e1-f57f-00005736d997","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm5","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e0eea-ec2e-d713-1f79-0000125630df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i686","pattern":"[url:value = 'http://150.241.65.212:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2dc1b9-ef96-fb54-203f-0000a9c73ab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x86","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5f9e8-d99d-d081-ee30-0000469988c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sh4","pattern":"[url:value = 'http://150.241.65.212:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c29a9e-a517-de4d-28ca-0000fd3f111c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm7","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d2e24b-3171-95ef-697a-00008c2c051c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mips","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8c5a18-9326-0b67-eded-00004219cd9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/bin.sh","pattern":"[url:value = 'http://125.43.228.137:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a50558c-22ff-6d1c-6848-0000b0fe5fa5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/i","pattern":"[url:value = 'http://117.223.141.118:49088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4172e9-2611-8b01-112f-00004e97c459","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.231.237:58779/bin.sh","pattern":"[url:value = 'http://42.225.231.237:58779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62cdaeb-287c-1047-3fba-000018ce3b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/i","pattern":"[url:value = 'http://125.43.228.137:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb28ea-07cd-5b97-49f6-00002731954e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/bin.sh","pattern":"[url:value = 'http://103.172.186.158:49566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f62e1c-5d9f-786c-eeae-0000be934198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/bin.sh","pattern":"[url:value = 'http://115.51.111.87:51413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6482efe-7b96-9f96-995e-0000382cdb0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.152:59339/bin.sh","pattern":"[url:value = 'http://59.96.140.152:59339/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e925d819-4828-9c58-6368-0000e56446e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/i","pattern":"[url:value = 'http://182.116.113.190:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5d9fdf-b570-dc11-c8b1-000091a08ca4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/i","pattern":"[url:value = 'http://218.0.112.226:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3426db-a986-0ba6-21e2-000097c0e8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/i","pattern":"[url:value = 'http://116.76.206.254:50342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b347fbbc-7b83-9504-52b0-000027c2ae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/i","pattern":"[url:value = 'http://103.172.186.158:49566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5897b608-79fd-e487-bd88-000026911b97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/bin.sh","pattern":"[url:value = 'http://175.165.6.177:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afd238e-562d-b630-4fa4-000062788afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/i","pattern":"[url:value = 'http://115.51.111.87:51413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61598d7-e8fb-22bf-fc71-0000a8f58234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/bin.sh","pattern":"[url:value = 'http://123.12.165.138:33116/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec85a1e-bc37-8993-86a9-000037253496","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.104.54:56510/bin.sh","pattern":"[url:value = 'http://112.248.104.54:56510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1a46-c4b1-ac19-7a02-000027fbf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/i","pattern":"[url:value = 'http://202.1.26.69:42948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--560da8b7-59f7-7a7a-fc7d-00002c08e731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/i","pattern":"[url:value = 'http://175.165.6.177:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3a0b24-30f0-7abd-b872-0000eecaab15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/i","pattern":"[url:value = 'http://123.12.165.138:33116/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57024aa2-a930-3616-0359-0000ca120a54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.232.182:58614/bin.sh","pattern":"[url:value = 'http://182.119.232.182:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9109e95-6738-982e-26c4-0000fddb88ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.136.25:46193/i","pattern":"[url:value = 'http://39.79.136.25:46193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86505e2a-a7d7-9474-4f10-00008effa730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.40.8:41660/i","pattern":"[url:value = 'http://61.54.40.8:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec1cd2f-0c8a-7102-78af-000055501fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/bin.sh","pattern":"[url:value = 'http://218.0.112.226:51471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bc924c-dae5-cdd0-9fc3-00000c56269c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/bin.sh","pattern":"[url:value = 'http://182.116.113.190:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f682c7f-0993-4b90-ff04-0000d183e838","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/bin.sh","pattern":"[url:value = 'http://110.186.231.112:53078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4308f7-0995-9b93-5e4e-000063f1ba37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.199.15:38549/i","pattern":"[url:value = 'http://182.119.199.15:38549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98db0edd-d595-addb-fc6b-0000fea5c587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/i","pattern":"[url:value = 'http://110.186.231.112:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d03c045-9b32-218d-bd1e-0000d0d48c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.101.70:58354/i","pattern":"[url:value = 'http://115.51.101.70:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48b3562-9945-420f-e061-0000677ec24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/bin.sh","pattern":"[url:value = 'http://123.5.191.195:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86a09f8-a937-c1df-5033-000033045471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/bin.sh","pattern":"[url:value = 'http://175.174.107.238:46076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830d9573-b07a-8291-9bb4-0000d04691c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/bin.sh","pattern":"[url:value = 'http://105.184.167.215:38779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2158ab-7ae2-a7f1-cbb4-00001f5030a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.30:39103/i","pattern":"[url:value = 'http://182.118.241.30:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66069ec-ada5-77e7-8b28-0000ad03dd1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/bin.sh","pattern":"[url:value = 'http://196.188.75.58:48074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a1de20-d8d3-b37d-7e04-000072517805","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/i","pattern":"[url:value = 'http://105.184.167.215:38779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c58c85-1771-dd37-6a5b-00006fb07dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/i","pattern":"[url:value = 'http://196.188.75.58:48074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3e42b7-5706-50c0-18a5-000037499d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/i","pattern":"[url:value = 'http://123.5.191.195:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17f1d4-4791-92b4-6138-0000f0828d83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/i","pattern":"[url:value = 'http://123.11.64.213:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcaeeae2-c401-3552-f5d2-0000cbefd455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.239:54755/i","pattern":"[url:value = 'http://175.148.156.239:54755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6d24c-e87b-c717-8eae-00006a26c1e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/bin.sh","pattern":"[url:value = 'http://221.1.247.58:51510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aabfb2b-dbeb-aa4f-22fd-00007622aef3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/bin.sh","pattern":"[url:value = 'http://105.154.98.198:48439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473f7804-d5c3-99a0-3b2f-0000a2ff33f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/bin.sh","pattern":"[url:value = 'http://113.231.100.15:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7eb96d-acd5-849e-852e-000036c3546b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/i","pattern":"[url:value = 'http://105.154.98.198:48439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2b1766-e9bc-970c-4b6e-000011138f60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv5l","pattern":"[url:value = 'http://31.76.20.19/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bddde71-d7dd-769f-2912-0000469c010a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/ppc64","pattern":"[url:value = 'http://31.76.20.19/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4da6173-5bbc-ec58-b561-0000b821f27f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mipsel","pattern":"[url:value = 'http://31.76.20.19/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d092696f-c1d8-0f6a-9d87-00001dc3ebe5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/x86","pattern":"[url:value = 'http://31.76.20.19/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdda4ca-56a3-6edc-7b26-00005a478100","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/i686","pattern":"[url:value = 'http://31.76.20.19/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81d75e4-2f89-be02-8849-00006bd3dc00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv7l","pattern":"[url:value = 'http://31.76.20.19/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a492a02-9e5a-f00b-5ffd-00009799a4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mips","pattern":"[url:value = 'http://31.76.20.19/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10644a5-5eba-1f0c-f147-000056b3f5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv6l","pattern":"[url:value = 'http://31.76.20.19/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb7692d-efde-bb24-e869-000025d96673","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/bin.sh","pattern":"[url:value = 'http://123.13.32.25:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba5f9c-4063-c4b1-36cb-000016e81f18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/i","pattern":"[url:value = 'http://123.13.32.25:51859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60465e3a-c981-736a-f1d1-0000660db1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/i","pattern":"[url:value = 'http://113.231.100.15:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a71cea-a63f-b710-2bcb-0000fec67bc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9df1c0-16a9-bc79-34d2-0000e6c0ecf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/run.sh","pattern":"[url:value = 'http://2.26.81.123/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792044b7-b94d-6bcb-18e4-00009b1c078b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm","pattern":"[url:value = 'http://2.26.81.46/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30c7c2c-fb8e-575f-a10c-00004f1d8048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/spc","pattern":"[url:value = 'http://2.26.81.46/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2fd89d-94d5-a3b6-93cf-0000e38d1c7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/i686","pattern":"[url:value = 'http://2.26.81.46/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98910620-5cab-b744-07ed-00001d690782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.m68k","pattern":"[url:value = 'http://2.26.81.46/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf8f3bb-c443-0bf0-a9f4-0000b18a9c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86","pattern":"[url:value = 'http://2.26.81.46/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14ac275-0f61-0c92-9c88-0000c989f2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/ppc","pattern":"[url:value = 'http://2.26.81.46/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cd2dc5-c4b4-dfdc-b929-0000a6edf536","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm5","pattern":"[url:value = 'http://2.26.81.46/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0229bc3e-980b-407e-c09a-0000d041f4ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.i686","pattern":"[url:value = 'http://2.26.81.46/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4182022-7922-c4b1-2839-000049576b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/sh4","pattern":"[url:value = 'http://2.26.81.46/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f50c62-43de-83c1-18f5-0000de47130a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86_64","pattern":"[url:value = 'http://2.26.81.46/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976283-b43c-d910-e312-00002ea5ef12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/m68k","pattern":"[url:value = 'http://2.26.81.46/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fc7d13-51b0-9250-0c8b-0000c48ce1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/dbg","pattern":"[url:value = 'http://2.26.81.46/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bd32f6-7fdf-2ad9-00e8-00001d9fd158","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.mips","pattern":"[url:value = 'http://2.26.81.46/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e69909c-08b4-72fd-3bea-000045505782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mpsl","pattern":"[url:value = 'http://2.26.81.46/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777a5e84-5e3c-a7f9-0818-000086a21e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.sh4","pattern":"[url:value = 'http://2.26.81.46/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbb5655-f2aa-1a8f-70d2-00002e5339c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mips","pattern":"[url:value = 'http://2.26.81.46/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc34ce9-b0d2-1f4e-381b-00000ce43dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm7","pattern":"[url:value = 'http://2.26.81.46/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba00790f-092d-6c4b-11c2-000001d7c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.x86_64","pattern":"[url:value = 'http://2.26.81.46/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ffa243-bbca-ebe4-efa2-000037994724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_amd64","pattern":"[url:value = 'http://144.31.30.228/linux_amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bd6afb-48d3-d53a-bc9d-000067259523","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm5","pattern":"[url:value = 'http://144.31.30.228/linux_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c87f6a-38b8-d0bb-7369-00008c2e24e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips64","pattern":"[url:value = 'http://144.31.30.228/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acb116b-6a8a-aebc-7e54-0000ef9b59dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips","pattern":"[url:value = 'http://144.31.30.228/linux_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f254de05-2151-012c-fff0-00008100facb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm64","pattern":"[url:value = 'http://144.31.30.228/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb30bd7-3d73-13ba-08b4-0000cd2c5da8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm7","pattern":"[url:value = 'http://144.31.30.228/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e65b7ad-4825-7dda-e597-0000b38a266b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/svchost.exe","pattern":"[url:value = 'http://217.60.241.248/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcfcf50-3c1e-bfb1-8943-0000df737f81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.247/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7b5df-abd5-57f6-c6f3-0000be144bb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81610c63-1ce0-26dc-c29b-000028e72e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.70.215:55426/i","pattern":"[url:value = 'http://182.119.70.215:55426/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb981b8-5a5a-7c59-b2a2-0000af1e480f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/tbk_stage1.sh","pattern":"[url:value = 'http://95.155.151.113/tbk_stage1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1360e400-592c-89ce-4047-000083d6120d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa7c8b-9285-2d0f-97ca-0000ac9fcd47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.11/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a63733-6a4b-d99a-705d-00007de9b849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/t","pattern":"[url:value = 'http://95.155.151.113/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5e1e31-dba1-d87c-11c2-0000894d8989","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/bin.sh","pattern":"[url:value = 'http://42.239.252.193:40074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123fbb9b-3a17-3fd5-b7cd-0000b46748e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_529348465823b047.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_529348465823b047.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd0235c-f029-d282-48bf-0000a9aa3783","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abfeb4f-088c-d998-217a-000069e40b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/mort.php","pattern":"[url:value = 'http://217.60.36.94/william/mort.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a0e0e4-e38e-cdd6-7bd8-0000d2356de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/t.php","pattern":"[url:value = 'http://217.60.36.94/test/t.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8638b0-a359-5793-9bb8-0000226c21db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/p.txt","pattern":"[url:value = 'http://217.60.36.94/test/p.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd6dc2-44a5-685b-bea1-000075029c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/wi.txt","pattern":"[url:value = 'http://217.60.36.94/william/wi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9773c1-90ba-37d9-9792-00000e629501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ee887-636b-7526-33fd-0000911c8fcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.36.94/test/test.bef_fri","pattern":"[url:value = 'http://217.60.36.94/test/test.bef_fri']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9023d3-c378-3c11-58fc-0000351f2a4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb63fd7-8f5e-d9f2-6359-0000066c5a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/gg11","pattern":"[url:value = 'http://150.241.65.212:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10649e1-b124-253c-70f3-0000948eaea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.68.244:54909/Mozi.m","pattern":"[url:value = 'http://36.70.68.244:54909/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9810004c-8ffb-c1d6-a03e-0000904121f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced1c5b8-4178-7a68-fa11-000078622b81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac2211a-7481-65c2-bce5-00001c32d54d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/bin.sh","pattern":"[url:value = 'http://42.228.104.137:42450/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1cac66-0cf5-a3f3-95a3-0000ae9f5de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/i","pattern":"[url:value = 'http://42.228.104.137:42450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2dee7ce-28d8-c6fd-7b1e-00001f1364fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://smmnet.store/Setup.rar","pattern":"[url:value = 'https://smmnet.store/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf5aa84-12e7-6534-7ef4-00008b75a44e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm","pattern":"[url:value = 'http://185.93.89.72/mirai.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f437fe-8073-075e-d24e-000061fb8d76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/img_155944.png","pattern":"[url:value = 'https://seasquadshipping.com/old/img_155944.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a7f94b-b86d-05b8-4942-000005754be6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/MSI_PRO.png","pattern":"[url:value = 'https://seasquadshipping.com/old/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ee2ad-0ec7-eecc-a9fd-0000c54d6654","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mips","pattern":"[url:value = 'http://185.93.89.72/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1872d67b-04a6-ef08-133b-0000c5bbb08e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.m68k","pattern":"[url:value = 'http://185.93.89.72/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cdce11-3aa0-5fa2-d7a6-0000593ec8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.sh4","pattern":"[url:value = 'http://185.93.89.72/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808cd23c-f138-0a08-ab71-00008e07314c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.i586","pattern":"[url:value = 'http://185.93.89.72/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e28993d-05fc-352f-918d-00004df3aaaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm5","pattern":"[url:value = 'http://185.93.89.72/mirai.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8026f811-f96d-c42d-baa9-0000e7fa6221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm7","pattern":"[url:value = 'http://185.93.89.72/mirai.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d9921f-05a5-2b5b-c059-00005f74238d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.spc","pattern":"[url:value = 'http://185.93.89.72/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659cafa7-ae57-b3e3-47b4-0000f8677167","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.x86_64","pattern":"[url:value = 'http://185.93.89.72/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4801c0-7957-04f2-6609-000004c52b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://nodemetrics3379.com/update/exe","pattern":"[url:value = 'http://nodemetrics3379.com/update/exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849f2c46-d41e-59af-7641-0000d9e05123","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.ppc","pattern":"[url:value = 'http://185.93.89.72/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d55ac54-f8f3-9177-e14d-000086709521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/i","pattern":"[url:value = 'http://42.239.252.193:40074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496fe891-3aae-6320-4cea-0000430d920d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1d49dd","pattern":"[url:value = 'http://5.182.210.174/1d49dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95320d1b-11b2-1267-f865-0000997c2667","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dcdd69","pattern":"[url:value = 'http://5.182.210.174/dcdd69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9985b25-9e2a-c9eb-98c7-00006d6b5e85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61f089","pattern":"[url:value = 'http://5.182.210.174/61f089']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459f964b-b8da-8086-a4bb-0000cf128483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c3106e","pattern":"[url:value = 'http://5.182.210.174/c3106e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba3d8e2-53e9-cacc-235a-0000582efcbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b9ac2","pattern":"[url:value = 'http://5.182.210.174/1b9ac2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30220d74-ab05-a5a6-f947-0000c740babb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e1bf38","pattern":"[url:value = 'http://5.182.210.174/e1bf38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a5ed65-a4a4-9de7-7164-0000f7069647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/03ab36","pattern":"[url:value = 'http://5.182.210.174/03ab36']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263f5693-a306-dc57-7129-000051a494ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98953a","pattern":"[url:value = 'http://5.182.210.174/98953a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c02d36d-633f-55ad-11e3-0000f062eab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8cf703","pattern":"[url:value = 'http://5.182.210.174/8cf703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1119c68f-4a9d-37c1-a0bc-0000e7d4c10a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c8bc3c","pattern":"[url:value = 'http://5.182.210.174/c8bc3c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41967b2-b97d-0e81-8aca-00007c7b3ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61d4b3","pattern":"[url:value = 'http://5.182.210.174/61d4b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3828279f-8019-a5b6-94a6-0000ed49a0c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/cd5c35","pattern":"[url:value = 'http://5.182.210.174/cd5c35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2779d8ed-cbbb-df3c-7017-0000357480f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/537b66","pattern":"[url:value = 'http://5.182.210.174/537b66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b160a6-71a8-401e-4ba7-0000f0188c38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3abc4d","pattern":"[url:value = 'http://5.182.210.174/3abc4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b507f5f7-a03b-4119-dd1f-0000b352a015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3cf53c","pattern":"[url:value = 'http://5.182.210.174/3cf53c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65223c09-e0fd-b048-9a0b-00005d34465f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.90.163.37/powerpc","pattern":"[url:value = 'http://45.90.163.37/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccb8860-69bb-5588-c440-0000434d87b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/51fc22","pattern":"[url:value = 'http://5.182.210.174/51fc22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6faed4-6aa6-acb0-53c9-0000937f35d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ca6953","pattern":"[url:value = 'http://5.182.210.174/ca6953']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee403b5-64f4-5d66-5b0b-0000bba90c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d3a258","pattern":"[url:value = 'http://5.182.210.174/d3a258']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d098b5ac-22d3-e07b-2e77-00004372a0f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a2daa","pattern":"[url:value = 'http://5.182.210.174/6a2daa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368e0871-b37a-5e4b-20e0-0000639c63d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45cbd5","pattern":"[url:value = 'http://5.182.210.174/45cbd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ed7a12-972e-1c6f-7048-0000e0bf3d3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e2ee47","pattern":"[url:value = 'http://5.182.210.174/e2ee47']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dec80b6-dcb0-2e14-07e4-0000a79af159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d620","pattern":"[url:value = 'http://5.182.210.174/c5d620']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea90e586-ad86-c046-2f99-0000c2c8b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/171868","pattern":"[url:value = 'http://5.182.210.174/171868']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9512f7ef-239c-cfe1-d932-0000fe8cd494","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aecb15","pattern":"[url:value = 'http://5.182.210.174/aecb15']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126be9a5-e393-3040-fc04-00007e192a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ff1781","pattern":"[url:value = 'http://5.182.210.174/ff1781']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f997ea4e-eded-ac1e-7e44-00004488f81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3a2ee0","pattern":"[url:value = 'http://5.182.210.174/3a2ee0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac6009e-8a44-1967-3add-000071fcb7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/174cb4","pattern":"[url:value = 'http://5.182.210.174/174cb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931039db-75cd-0ab3-ff9d-000066990232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/28d4d8","pattern":"[url:value = 'http://5.182.210.174/28d4d8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd656a1-e3dc-e495-760c-0000af9dff71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/748306","pattern":"[url:value = 'http://5.182.210.174/748306']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b75bf3-1291-7275-587e-00004fbe2ad4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00d054","pattern":"[url:value = 'http://5.182.210.174/00d054']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d293b17-ebbf-92b8-af81-0000931f8752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fff372","pattern":"[url:value = 'http://5.182.210.174/fff372']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678eb139-3b7f-3ade-9b8a-00002812aa08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e44028","pattern":"[url:value = 'http://5.182.210.174/e44028']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee6ff7-09f8-652f-6c79-0000e12a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/035755","pattern":"[url:value = 'http://5.182.210.174/035755']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c461fc60-0153-1992-b769-00003e1d7135","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44066b","pattern":"[url:value = 'http://5.182.210.174/44066b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebcfe3d-5513-2008-986a-0000902d0097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6d0d44","pattern":"[url:value = 'http://5.182.210.174/6d0d44']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c43d73-eb52-70ec-7fbb-00005420dd30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7a276a","pattern":"[url:value = 'http://5.182.210.174/7a276a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108b85cf-798d-51bd-d370-0000521ba265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/img/img_081951.png","pattern":"[url:value = 'http://204.77.9.56/img/img_081951.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d11bdc-2fe3-b3ff-365b-00002807a095","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta","pattern":"[url:value = 'http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9e5488-ff8f-513c-ee77-0000d23029f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959140a4-8618-d897-a280-00005d765c50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90cb09","pattern":"[url:value = 'http://5.182.210.174/90cb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78581513-2d07-8a3e-31ed-0000b813672d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/828087","pattern":"[url:value = 'http://5.182.210.174/828087']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f782d83-4871-594f-09fc-000069f143b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bf1cf","pattern":"[url:value = 'http://5.182.210.174/8bf1cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f64c3-493a-b3c8-27c1-0000d068ee12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70d8b3","pattern":"[url:value = 'http://5.182.210.174/70d8b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b743b674-e490-3341-b67a-0000fac49c81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/657b82","pattern":"[url:value = 'http://5.182.210.174/657b82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f722fa-2d63-7034-bdb7-0000c84e92a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/60f898","pattern":"[url:value = 'http://5.182.210.174/60f898']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d2dc1d-1422-056f-e1b2-0000a5d84c76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c99e43","pattern":"[url:value = 'http://5.182.210.174/c99e43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2af8f1-69ec-fff0-e773-000047aefea0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/671030","pattern":"[url:value = 'http://5.182.210.174/671030']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60c38-6988-2d3b-2fd0-000050b9a812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/eb77a9","pattern":"[url:value = 'http://5.182.210.174/eb77a9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a26a6c7-6f99-6a27-cb17-00004ac65b83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8413a4","pattern":"[url:value = 'http://5.182.210.174/8413a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad08db5-1b9f-fc77-4b8e-00003f1d4d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/320b53","pattern":"[url:value = 'http://5.182.210.174/320b53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09036550-72f0-042e-00ed-00001949a54f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1903e1","pattern":"[url:value = 'http://5.182.210.174/1903e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36abd886-6fe7-79a8-b60a-0000192b17dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.160.130.168:43943/bin.sh","pattern":"[url:value = 'http://103.160.130.168:43943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeaeee9-17c9-9d15-fd23-0000d2677b2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/i","pattern":"[url:value = 'http://119.115.36.34:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16d3b6f-ebb5-3723-9f4f-0000b84c3bbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/bin.sh","pattern":"[url:value = 'http://45.194.25.221:39724/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a425480-ac15-10d3-85e1-00005346e648","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/i","pattern":"[url:value = 'http://45.194.25.221:39724/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f63965d-a55e-bf9c-8c33-000063b2e54c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/bin.sh","pattern":"[url:value = 'http://182.116.120.105:42593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b971ce43-50ff-53d8-a591-0000f4d1cde4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/i","pattern":"[url:value = 'http://182.116.120.105:42593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f846f6e0-f9e2-3793-f171-000080cd3768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/i","pattern":"[url:value = 'http://182.121.155.69:33600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb1799a-3044-1f59-7b93-000046693933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/bin.sh","pattern":"[url:value = 'http://219.155.11.56:58484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18c2464-b122-615c-a2c0-0000ae4e081e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mpsl","pattern":"[url:value = 'http://185.93.89.72/mirai.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401e13cd-70b1-2354-d57c-0000f6e13c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/bin.sh","pattern":"[url:value = 'http://144.48.123.149:37810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e9da2e-808f-7431-8351-000064a4599a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.54.103.153/50/givingbesthingsforbetterforme.hta","pattern":"[url:value = 'http://209.54.103.153/50/givingbesthingsforbetterforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316efc5d-17e7-7445-fef9-000082111a92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/i","pattern":"[url:value = 'http://219.155.11.56:58484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c912aab-1b7a-f3e8-1446-0000c93898c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/i","pattern":"[url:value = 'http://123.12.191.97:55649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5737c39d-9dfd-7e81-9f3f-000059d74fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.arm","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3343ed67-9b98-31f7-4606-0000bdeb05b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bash.sh","pattern":"[url:value = 'http://176.65.139.131/phantom_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73e4431-fa3b-dc9b-d060-000084ab5d14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.x86_64","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302e8804-d9b0-731f-82d3-0000dcf3f2ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.mips","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7cdb62-a032-85d6-0932-0000845a7be8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/dbg","pattern":"[url:value = 'http://176.65.139.132/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afca6404-41a7-963f-ecc7-0000895f68d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/ppc","pattern":"[url:value = 'http://176.65.139.132/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca79759-77dc-c209-bcfd-0000e1a97acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mips","pattern":"[url:value = 'http://176.65.139.132/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd8bd73-5946-f6ce-2295-00007ba219db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm6","pattern":"[url:value = 'http://176.65.139.132/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8cda5d-ee32-4433-ba7d-00000fcb1a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/spc","pattern":"[url:value = 'http://176.65.139.132/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808ba38f-1752-67cd-376b-0000e15fac11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/m68k","pattern":"[url:value = 'http://176.65.139.132/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704a00dc-5398-d2ab-c25b-0000e6ec2104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/d.sh","pattern":"[url:value = 'http://176.65.139.132/d.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da988653-70ec-cfc0-a209-00000981f126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/sh4","pattern":"[url:value = 'http://176.65.139.132/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79755190-22c7-28b5-57fb-00008aaa1481","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mpsl","pattern":"[url:value = 'http://176.65.139.132/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827855ca-4468-3db3-2b90-0000f15c06a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86","pattern":"[url:value = 'http://176.65.139.132/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a0e2c6-acfb-ab44-100b-0000dbca9dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm","pattern":"[url:value = 'http://176.65.139.132/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d1ecc9-d456-3083-b0e2-00006917b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm5","pattern":"[url:value = 'http://176.65.139.132/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a331991-16a0-6f55-6585-00002c775f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/i686","pattern":"[url:value = 'http://176.65.139.132/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18df8de5-299f-91de-0df5-0000c31e7ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm7","pattern":"[url:value = 'http://176.65.139.132/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35239654-eb20-ad02-05ef-00001abf9f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86_64","pattern":"[url:value = 'http://176.65.139.132/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a57576e1-ae55-97dc-0602-0000055ca45f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c2","pattern":"[url:value = 'http://176.65.139.132/c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c275b-7a79-521f-f1f9-000017e90bb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c1","pattern":"[url:value = 'http://176.65.139.132/c1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abfac54a-a82f-fe80-d18f-0000629e751a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv6l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d79689-9e7b-40c3-9edb-0000253e0fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv5l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291982ff-e30b-a220-e313-000027302363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i486","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e1f40b-00a7-e764-1007-00005ffe5caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv7l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cca7c8-a854-c935-807a-0000185e267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0037cd-7cf5-ac4c-3170-0000fd06e083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d340fafb-2931-6c45-c43b-0000d56891eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.x86_64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355ad295-3496-762c-3d72-0000371e20f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4eb","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813bdc82-c428-ddf8-efa1-00008a41e9f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.armv4tl","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4tl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b025ec8f-d10f-3850-7d7f-0000a7d07104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.m68k","pattern":"[url:value = 'http://176.65.139.130/bins/bin.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d5691-2ce3-6f2c-c426-00006af88268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i686","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28dbe8c8-cb15-1de3-1c3e-0000ec6cf0c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i586","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1286fbc-df01-0176-f9b4-0000efe29d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.sh4","pattern":"[url:value = 'http://176.65.139.130/bins/bin.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe26e09c-5fe5-c40a-dcdd-00008c0c72d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mipsel","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e20408-57ac-aa25-02f5-0000d00d5251","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1d869d-75d4-f328-d54b-00000f623d03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc-440fp","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc-440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09d859-c80b-1552-ed0a-0000a726a7de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17715e6-a068-6c98-d106-0000a0cdebd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/i","pattern":"[url:value = 'http://144.48.123.149:37810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed631db-d7cb-2b19-49e0-0000dc47efd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b04f712-15d0-246f-0bb4-0000b7448198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.67/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fa050d-1fa9-25bd-166a-0000dcb13908","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.67/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb234e6-2c84-4015-02ba-0000c75cc8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a04a4b-cecf-df5a-b993-000054f9232c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6a83ea-bb4b-ef76-4e88-0000edca53d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da91bf1-35f9-3e93-1046-0000464c8cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06000528-a34b-3b13-4271-0000bf5fa6b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.67/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac1852-994c-e7cd-319e-0000c635c83e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/ohshit.sh","pattern":"[url:value = 'http://94.154.43.67/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7352e77f-871d-173c-4d50-00003f813f43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.67/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aae2b67-a77a-92e5-388f-0000fef0eba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0446bb71-1046-f213-134f-000039cbd41b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.spc","pattern":"[url:value = 'http://94.154.43.67/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682d32f1-9b2a-2776-21f6-0000e8df5425","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/bin.sh","pattern":"[url:value = 'http://110.36.16.115:34086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e78be04-c9b1-d81f-d894-0000d7e79704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/bin.sh","pattern":"[url:value = 'http://42.234.186.105:46982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53d2e04-07b3-1bc4-e26d-0000a010a8fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/bin.sh","pattern":"[url:value = 'http://182.121.155.69:33600/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff629f5-6557-684c-5a4e-000057e13c78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/i","pattern":"[url:value = 'http://110.36.16.115:34086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eac546b-54d7-7b73-8d98-0000b14316b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/i","pattern":"[url:value = 'http://110.39.233.226:51559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b9985-5e41-4c9a-9ba8-0000396e646b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/bin.sh","pattern":"[url:value = 'http://212.169.147.128:38805/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17381db3-2090-99b6-2555-0000e400d172","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/bin.sh","pattern":"[url:value = 'http://123.13.115.219:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be1ac86-946a-2f21-0aa7-0000c47103bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/i","pattern":"[url:value = 'http://200.115.102.2:47663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff2a570-596b-7ed5-7fb3-00002044f63d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.138.135:48639/bin.sh","pattern":"[url:value = 'http://115.203.138.135:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89f3afe-572b-f035-4211-00000e354b00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/i","pattern":"[url:value = 'http://219.156.18.240:56348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c77f929-0c04-9b3c-9075-0000c8f586e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.202.24.36:37993/bin.sh","pattern":"[url:value = 'http://27.202.24.36:37993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbd995-fa42-a43b-6305-000053e25a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/i","pattern":"[url:value = 'http://61.52.33.47:57035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a837c-1377-2900-445b-00002f3ab7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/bin.sh","pattern":"[url:value = 'http://202.1.26.69:42948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1d4cc9-1095-3ecc-9e72-000055c284fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3be91ff-0ba2-e5ab-c637-00000e6d5450","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.14:38104/bin.sh","pattern":"[url:value = 'http://221.15.12.14:38104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f7d358-c039-b4c9-72a5-00001f15cb34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/i","pattern":"[url:value = 'http://123.13.115.219:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9b5d17-655f-2804-8608-000085d799d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/i","pattern":"[url:value = 'http://115.49.198.105:41583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e0a2-cdcf-a054-b1f9-00001cf2aa26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/i","pattern":"[url:value = 'http://182.113.203.41:58932/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff4a808-196c-5de0-6d53-0000266b141d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.25.171.108:39654/i","pattern":"[url:value = 'http://78.25.171.108:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23032efe-acf8-3bd1-a1a9-0000d92243c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/bin.sh","pattern":"[url:value = 'http://123.11.64.213:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af34c2d-11be-1ec5-b768-0000bc9b33f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/i","pattern":"[url:value = 'http://42.235.73.160:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9101a-7cd1-3cdf-dbb3-00006b643b94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/i","pattern":"[url:value = 'http://219.155.132.216:54527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168e570-23f2-2696-5f8a-0000c0e7c3ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/i","pattern":"[url:value = 'http://115.50.51.98:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e04f1f8-6f41-868a-eea9-0000456b734d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.215.27:37136/i","pattern":"[url:value = 'http://182.113.215.27:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50020564-ccc7-bfec-b175-000028d1b36b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/bin.sh","pattern":"[url:value = 'http://115.50.51.98:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1872e0-6ca9-8aa0-482e-000053f11691","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.224.62:58009/i","pattern":"[url:value = 'http://182.113.224.62:58009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa05f60-5a45-983c-864c-000057546c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.203.255:46437/i","pattern":"[url:value = 'http://182.126.203.255:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacab5c8-01ca-7d0c-0405-000089c9f3bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/bin.sh","pattern":"[url:value = 'http://115.62.155.31:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72442366-d615-66e9-ba6c-0000773400a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/i","pattern":"[url:value = 'http://103.172.186.165:43638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60bf2-f394-0fb2-32c4-000083c02d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/i","pattern":"[url:value = 'http://123.12.46.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa01160f-cd45-bdea-a355-000094b58778","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/i","pattern":"[url:value = 'http://105.186.143.37:55447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf902995-8439-80ff-d2d1-0000bbe733d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.57.254:59568/i","pattern":"[url:value = 'http://175.150.57.254:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64562bc-1eb3-54a2-9b50-0000694ffe26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/i","pattern":"[url:value = 'http://123.10.58.106:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f83772-724a-9772-22e3-0000806223fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/i","pattern":"[url:value = 'http://115.62.155.31:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8996d244-6ea3-a7c4-b64b-00002987f1d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/i","pattern":"[url:value = 'http://178.141.132.110:51968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13ca23a-6cea-ed8d-0641-00006ed487e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/bin.sh","pattern":"[url:value = 'http://222.140.218.50:48585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eed49ad-943f-6ad0-1084-0000dad6e11a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.131.48:48702/i","pattern":"[url:value = 'http://123.129.131.48:48702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928f5e6e-666e-09cb-138b-0000ef004d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.236.8:39421/i","pattern":"[url:value = 'http://125.47.236.8:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746d08c5-54e0-f5f8-c019-000098c8869c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/i","pattern":"[url:value = 'http://123.8.35.65:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b852f4-0d73-3264-894d-00000b8c9afb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/i","pattern":"[url:value = 'http://125.45.146.236:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3798c839-c2f8-140f-7ea7-0000223bddb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.208.16.252:3588/i","pattern":"[url:value = 'http://58.208.16.252:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e87d5e-33e3-aa36-d4e3-0000a6142b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/bin.sh","pattern":"[url:value = 'http://42.5.247.27:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156e6512-9c44-aa0a-2707-00005954e118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/bin.sh","pattern":"[url:value = 'http://36.97.90.188:53553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd212b70-cad9-87f2-c54f-00009a9ec014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/i","pattern":"[url:value = 'http://36.97.90.188:53553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fb22b-2310-ab8b-a331-000086223d1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/bin.sh","pattern":"[url:value = 'http://162.246.26.77:54746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55793f49-a66d-0e70-a513-0000fa3a1010","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/bin.sh","pattern":"[url:value = 'http://182.113.203.41:58932/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db855758-1555-1fb9-3792-0000fef18641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/i","pattern":"[url:value = 'http://66.8.135.142:50653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4551a0a4-b748-a897-0f3e-0000986c6ddc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/bin.sh","pattern":"[url:value = 'http://182.127.69.34:57222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a9833-b558-29a1-3f7f-0000db1386c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.251.225.122:36907/bin.sh","pattern":"[url:value = 'http://112.251.225.122:36907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5187a86e-741e-eb61-fe3b-0000a33d83b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.66.105:43207/bin.sh","pattern":"[url:value = 'http://42.180.66.105:43207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23140b4f-7646-39c9-8d12-0000769e82c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/bin.sh","pattern":"[url:value = 'http://125.45.56.103:35641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1c4b5c-85a6-1de4-ae21-0000965c5835","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.246.124:41208/bin.sh","pattern":"[url:value = 'http://119.115.246.124:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5fa61-c5a3-a61a-32a0-00008350fbfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/i","pattern":"[url:value = 'http://125.41.2.23:55597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46752bc-80f9-6bc3-6fe6-000063698953","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/bin.sh","pattern":"[url:value = 'http://178.141.132.110:51968/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822f072b-5ec3-e23f-f8da-000024fe47b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.157.187:43642/bin.sh","pattern":"[url:value = 'http://42.230.157.187:43642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014c340d-1300-beec-b80b-000038ee28b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.5.189:45058/bin.sh","pattern":"[url:value = 'http://110.136.5.189:45058/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798b91a2-f34e-9208-899c-00003cba2d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/bin.sh","pattern":"[url:value = 'http://123.8.35.65:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44485420-9416-8838-c658-00006aeb52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/bin.sh","pattern":"[url:value = 'http://123.12.191.97:55649/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48e18fb-3a3f-c0bb-646a-0000c5fcef15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/bin.sh","pattern":"[url:value = 'http://39.73.172.141:48914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397e33ab-60cb-77ef-6ea2-0000628dce1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/i","pattern":"[url:value = 'http://125.45.56.103:35641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5e6dd1-7c77-a51d-ff1b-000024bd731d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/bin.sh","pattern":"[url:value = 'http://222.140.197.124:40018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dbf536-906a-36f3-2d86-0000ac5ac2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.114:34219/i","pattern":"[url:value = 'http://115.48.147.114:34219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3875d6-2dd6-849b-fc80-0000073839ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/i","pattern":"[url:value = 'http://222.138.151.112:58571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a13c236-797f-33da-6d44-0000a9e22814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/i","pattern":"[url:value = 'http://222.220.238.254:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd4713f-e081-1763-f225-00006cdbb955","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/i","pattern":"[url:value = 'http://27.221.246.187:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c749996-18b2-d0c4-090e-0000fa0305f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/bin.sh","pattern":"[url:value = 'http://119.115.36.34:51030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77bceee-53da-46f4-14a8-0000c5a4ea87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/bin.sh","pattern":"[url:value = 'http://42.234.191.110:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c98247a-c008-ab25-af0a-0000a22c5274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/bin.sh","pattern":"[url:value = 'http://182.116.85.112:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5d216c-d602-7a0c-f67b-00002cfe4f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/i","pattern":"[url:value = 'http://42.234.191.110:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07952194-906e-3128-ba92-0000029627ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.148.216.12:43983/bin.sh","pattern":"[url:value = 'http://123.148.216.12:43983/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57dce9b8-ed37-45c0-ebc1-00003fe23c0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/i","pattern":"[url:value = 'http://125.44.52.171:42860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3ad6fb-671c-b473-cb18-00005c89624f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.32/zot","pattern":"[url:value = 'http://213.177.179.32/zot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7645deaf-4247-5aa2-e770-00003f5f020b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/i","pattern":"[url:value = 'http://222.140.197.124:40018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3d0847-8ac9-3b01-fa2f-000011121849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.241.62:53088/bin.sh","pattern":"[url:value = 'http://115.55.241.62:53088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7eb39a-9a31-4899-6c40-00007ca7d965","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/i","pattern":"[url:value = 'http://83.219.1.198:35955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9ba1-caf6-9472-ffb9-0000a9ce9f5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/bin.sh","pattern":"[url:value = 'http://105.186.143.37:55447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3711cea-4fc4-2a8e-b606-000091760cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/i","pattern":"[url:value = 'http://212.169.147.128:38805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a57d199-413d-1d2f-c0c5-00006b98f6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.7.234:37031/bin.sh","pattern":"[url:value = 'http://175.175.7.234:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d20755-00a5-0b60-7775-0000b99d8c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/i","pattern":"[url:value = 'http://125.44.18.255:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53b37d6-8fb7-1f51-bba2-00005c7e45d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/i","pattern":"[url:value = 'http://42.5.247.27:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5130d6eb-0872-02ae-1b62-0000a07a288b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:54934/bin.sh","pattern":"[url:value = 'http://95.9.35.137:54934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7291f94c-64a7-8ca6-744f-0000cf80c85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.78.13:52046/bin.sh","pattern":"[url:value = 'http://175.173.78.13:52046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281f9ab4-4411-e9a5-a851-000030877c2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.189.81:42693/bin.sh","pattern":"[url:value = 'http://123.14.189.81:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be9b52c-9738-92f3-f811-00008545fa70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/bin.sh","pattern":"[url:value = 'http://115.57.185.130:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb45a9d-2c9f-9eb5-4d6f-00008de5ac88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/bin.sh","pattern":"[url:value = 'http://222.138.151.112:58571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04822737-55ef-3d94-d85d-00000c21e6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/bin.sh","pattern":"[url:value = 'http://219.155.132.216:54527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e9d186-fd39-1686-2eef-0000503b8cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/bin.sh","pattern":"[url:value = 'http://61.52.33.47:57035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1b89-67ea-621c-a6c4-0000a4131048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/i","pattern":"[url:value = 'http://61.137.195.76:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4721635c-532b-8b77-9d4d-00009369ba07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/bin.sh","pattern":"[url:value = 'http://83.219.1.198:35955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab217bc-9d4e-94b9-177b-000018de1406","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/i","pattern":"[url:value = 'http://42.85.134.175:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1733cd35-344a-00b7-3f23-00001752aad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/bin.sh","pattern":"[url:value = 'http://115.57.215.99:50083/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c50dde-22a5-d3d8-58e5-00002dc11582","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/i","pattern":"[url:value = 'http://175.149.219.183:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82832241-4b9f-38de-1e9c-0000562d3661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/bin.sh","pattern":"[url:value = 'http://110.39.233.226:51559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47086850-bad6-0128-82e2-00003b3502c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/i","pattern":"[url:value = 'http://222.140.218.50:48585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397fdf19-52f3-6cf5-a505-0000219b6815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/bin.sh","pattern":"[url:value = 'http://123.10.58.106:59256/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9edbaf-1340-8bca-5afc-00005329fdea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.160:52311/bin.sh","pattern":"[url:value = 'http://120.28.194.160:52311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5626c54f-d5c5-4cf6-4b9a-0000eb3029f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/i","pattern":"[url:value = 'http://175.151.64.247:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ea982-2e5f-eb17-d90e-00007eb53370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.2.69:46177/i","pattern":"[url:value = 'http://182.117.2.69:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97aa1e7-9239-b993-e5e0-00005f1796d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/i","pattern":"[url:value = 'http://219.155.228.87:54535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb52b1e-7ad4-39ef-c0fd-00002fb571d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/i","pattern":"[url:value = 'http://115.57.185.130:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ca75fe-b9a3-3fc0-4a24-000062d5bdae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/i","pattern":"[url:value = 'http://125.40.159.186:42538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c6870d-b988-4f60-32e9-0000fa6bbf9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/bin.sh","pattern":"[url:value = 'http://221.14.14.94:38720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d199ae-22a5-b340-88e0-000076c7e61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.195.40:53219/bin.sh","pattern":"[url:value = 'http://112.198.195.40:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0965093-0c98-840a-6e84-0000a8f428d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.118.145:47315/i","pattern":"[url:value = 'http://61.53.118.145:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2f291a-3549-2847-6ff3-00000a50c184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/bin.sh","pattern":"[url:value = 'http://123.12.46.36:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f7f615-902b-8a37-4625-00008fa40539","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.197.66:51494/bin.sh","pattern":"[url:value = 'http://61.137.197.66:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64984b9a-b8a3-96d8-8e6a-0000e9abf554","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/bin.sh","pattern":"[url:value = 'http://125.41.2.23:55597/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d5248b-61bf-22f8-234f-00001e4776e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/bin.sh","pattern":"[url:value = 'http://27.221.246.187:34948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfde8d-3abe-5cd5-a01b-0000144ceafb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/i","pattern":"[url:value = 'http://115.57.215.99:50083/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec24814c-24d8-c453-93ea-0000936d7c3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/bin.sh","pattern":"[url:value = 'http://42.85.134.175:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb579c5-1974-98f1-603f-000026e49497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/i","pattern":"[url:value = 'http://221.14.14.94:38720/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41aa7c44-b214-cb97-2875-0000366c1cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/bin.sh","pattern":"[url:value = 'http://219.156.18.240:56348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8112b2-6143-edda-4f79-0000d0e7ac28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/bin.sh","pattern":"[url:value = 'http://113.230.51.31:34338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b4b374-5bc1-0723-c92d-0000a46a0f5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.229.171:36842/bin.sh","pattern":"[url:value = 'http://219.155.229.171:36842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b51da7-e9a7-4608-ca73-00006c2625a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.232.174:49324/i","pattern":"[url:value = 'http://222.137.232.174:49324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a94dfaa-fa5f-c1cc-f576-0000d15b13cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.52:57834/bin.sh","pattern":"[url:value = 'http://182.129.144.52:57834/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f0d6ea-d758-a295-8408-00003adc8078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/bin.sh","pattern":"[url:value = 'http://125.40.159.186:42538/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c2fa8f-3f09-53f8-78da-00008526b3cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/i","pattern":"[url:value = 'http://182.116.85.112:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c608e-a8e6-4faa-5e72-0000054a1550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.73.48:41032/i","pattern":"[url:value = 'http://175.151.73.48:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217c4a0e-2eb8-0346-d6b5-0000adcdf21d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/i","pattern":"[url:value = 'http://114.228.239.251:54062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e515aa-cb38-ef1b-53b4-0000c74c6d5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.226.228:44054/i","pattern":"[url:value = 'http://27.37.226.228:44054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1582c38d-5081-5387-2f62-0000fefaabe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/i","pattern":"[url:value = 'http://42.225.220.81:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a1053f-365d-6f00-f3fe-000007e780ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/i","pattern":"[url:value = 'http://182.119.120.150:46472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbf3c24-1e88-b565-f30d-0000e31f7ccb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/bin.sh","pattern":"[url:value = 'http://222.220.238.254:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e876a64-12a1-cd1c-7429-00005766b392","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/i","pattern":"[url:value = 'http://222.137.39.216:48007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcab9f-b457-a921-ac03-0000fbc161ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.6.81:41787/i","pattern":"[url:value = 'http://140.237.6.81:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1caa21c3-5385-0d24-f7b2-0000dd0332be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.62.77:52860/i","pattern":"[url:value = 'http://112.242.62.77:52860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1fe838-da2a-cbe2-7810-0000c5a185cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/i","pattern":"[url:value = 'http://123.188.223.103:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7109b6c5-47c5-e006-a563-0000a851a0ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.31.123:48146/i","pattern":"[url:value = 'http://115.203.31.123:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c18c53-0a56-27f0-b0ff-0000e1d9f0b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/i","pattern":"[url:value = 'http://36.69.88.195:51348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ac3fda-32fe-168f-d7bb-0000f3d6305e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/syss","pattern":"[url:value = 'http://223.76.100.36/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722fbadf-0efa-74b8-1614-0000c7584cba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/amd","pattern":"[url:value = 'http://223.76.100.36/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017dc03a-8f05-d60a-660c-000038c4ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/i","pattern":"[url:value = 'http://42.234.186.105:46982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029cc18-283f-e940-e3cf-0000c3beb7b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/bin.sh","pattern":"[url:value = 'http://219.155.228.87:54535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06968cd-ccc3-b3ed-ff8b-0000f44b781e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.120.104.147:8080/d/installer-4","pattern":"[url:value = 'http://87.120.104.147:8080/d/installer-4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a2b13f-db1e-0cf1-f247-00001e47ba7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.136.11:53679/i","pattern":"[url:value = 'http://42.235.136.11:53679/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48d14e2-9724-884d-ff75-0000e3b7696c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.197.245:54778/bin.sh","pattern":"[url:value = 'http://36.70.197.245:54778/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24d0717-42d4-7c4c-2fa7-0000aa335b63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.193.159:51649/i","pattern":"[url:value = 'http://125.42.193.159:51649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d25159a-856b-d7c8-b41d-000078434ae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.179:51284/i","pattern":"[url:value = 'http://27.37.101.179:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c4b197-0f00-0f4a-61ba-00006dfd728d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/bin.sh","pattern":"[url:value = 'http://125.43.36.213:55623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f480240-ad12-a7c2-a749-0000cedd6361","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd8cd14-2a25-677f-73b2-00001905bd1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.152.192:37513/bin.sh","pattern":"[url:value = 'http://61.53.152.192:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb81fd2-8cbb-1c16-41a3-0000729b910b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/bin.sh","pattern":"[url:value = 'http://125.44.18.255:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a132a24e-3dc1-a137-f946-0000da946a2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/i","pattern":"[url:value = 'http://125.43.36.213:55623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77430d76-da71-882b-20c0-0000fe713f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/bin.sh","pattern":"[url:value = 'http://110.36.86.83:58585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725546e0-66ff-695b-6180-0000e0b6d884","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/i","pattern":"[url:value = 'http://110.36.86.83:58585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f70c7-4c4e-adbc-7b61-0000f9cf91cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/bin.sh","pattern":"[url:value = 'http://125.44.52.171:42860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c47f77e-519d-5565-0f74-0000195ca3d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/i","pattern":"[url:value = 'http://42.235.50.219:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b408eb9f-449f-a313-e418-0000b16818c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/144.exe","pattern":"[url:value = 'http://serdaregitim.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4252ad5b-1bd1-6b3f-f8d7-00000a5376c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/3.exe","pattern":"[url:value = 'http://serdaregitim.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883583d8-1820-f32b-c5e8-000031f12e05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://166.0.192.57/loader","pattern":"[url:value = 'http://166.0.192.57/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873aeecc-ce9f-47fa-ef16-00006a322ddd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/bin.sh","pattern":"[url:value = 'http://39.87.217.20:54835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f809643-2bd8-7b55-f33e-00004c09d8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/i","pattern":"[url:value = 'http://39.87.217.20:54835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5c959a-ba6d-7b36-6fb0-00006a191bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/bin.sh","pattern":"[url:value = 'http://222.138.238.78:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f115fd24-4c14-24b7-8976-000007fdd078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/bin.sh","pattern":"[url:value = 'http://182.121.115.176:33524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cfa2b1-279e-2042-4d16-0000a700d0d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/i","pattern":"[url:value = 'http://182.121.115.176:33524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f952594a-04f8-9089-fe0d-000067679b84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/bin.sh","pattern":"[url:value = 'http://42.230.54.173:38816/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bfa500-1c60-24a1-8a47-00007cd8a35b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/bin.sh","pattern":"[url:value = 'http://101.109.232.82:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd744067-a743-692d-785b-00001eff62e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/bin.sh","pattern":"[url:value = 'http://182.113.206.161:49109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b23f4a-33d8-d2a5-9f65-0000f4cab5b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/i","pattern":"[url:value = 'http://222.138.238.78:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c675dd-614e-7d1e-0995-00005168092d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/i","pattern":"[url:value = 'http://42.230.54.173:38816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053971b3-8da7-a083-5b43-00005a4fc55d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/i","pattern":"[url:value = 'http://101.109.232.82:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a203eed2-fb88-06b8-4ab7-0000238f2b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/i","pattern":"[url:value = 'http://182.113.206.161:49109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c80cc0-3999-756d-6158-00005cd3d659","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.78.32:51467/i","pattern":"[url:value = 'http://42.226.78.32:51467/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0cbab6-4d20-2b2d-a7f4-00002239cdca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/bin.sh","pattern":"[url:value = 'http://182.116.119.9:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876cf71a-51e9-c84c-dbd9-0000fa3e3986","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/i","pattern":"[url:value = 'http://179.108.89.220:55094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef668de-a952-001a-4c20-00008a9bebbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/i","pattern":"[url:value = 'http://182.116.119.9:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e910c1-a4ef-0194-7618-0000f70ff14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/bin.sh","pattern":"[url:value = 'http://27.215.181.39:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedcf7f9-994f-4700-4a90-00009afbe4ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/i","pattern":"[url:value = 'http://27.215.181.39:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434b06e-6c35-b7de-81ed-0000734ef93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/bin.sh","pattern":"[url:value = 'http://182.121.46.253:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df2b037-b5f8-54e7-de6c-000062248b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/i","pattern":"[url:value = 'http://182.121.46.253:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8362d282-bfbe-862e-477c-000006752d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/bin.sh","pattern":"[url:value = 'http://115.49.198.105:41583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9984ddd7-6206-00a8-48ad-0000a2f39ae9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/bin.sh","pattern":"[url:value = 'http://110.38.221.182:35958/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0db074-9a8a-4031-239d-00003dfa57a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/bin.sh","pattern":"[url:value = 'http://118.232.137.101:42009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f98632-fbd4-18a2-e51c-00007a21017d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/bin.sh","pattern":"[url:value = 'http://103.172.186.165:43638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db069ccb-36c4-a609-4181-00005d1b5cf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/i","pattern":"[url:value = 'http://110.38.221.182:35958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada811ff-9ac4-05ed-6b60-0000c13a7924","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/bin.sh","pattern":"[url:value = 'http://222.141.82.215:49425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0649bd63-0bfa-615e-8743-0000e08c1910","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/i","pattern":"[url:value = 'http://118.232.137.101:42009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7758f539-357f-3965-9c7b-0000d3b757f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/bin.sh","pattern":"[url:value = 'http://42.235.50.219:33430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba9aec0-e436-42e0-72d1-0000fa5759de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/i","pattern":"[url:value = 'http://222.141.82.215:49425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c6c875-446f-3666-71e1-0000d768d556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/bin.sh","pattern":"[url:value = 'http://42.178.168.78:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fcf583-2f02-6728-382a-0000cac54b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/i","pattern":"[url:value = 'http://42.178.168.78:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb537ed3-c536-a181-3d99-000038679a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/bin.sh","pattern":"[url:value = 'http://115.55.233.2:37781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e01a6d6-dbc5-d93c-ba42-0000f22827eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/bin.sh","pattern":"[url:value = 'http://47.215.224.64:37433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad98508-85ab-8c37-f637-0000439e1202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.235.157.125:52016/i","pattern":"[url:value = 'http://122.235.157.125:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15925df-f1ec-7266-964f-000088e70ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/i","pattern":"[url:value = 'http://115.55.233.2:37781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee7fbdd-62c7-a581-f552-0000b801ac3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/i","pattern":"[url:value = 'http://47.215.224.64:37433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fac271-364c-6d9a-d920-000005e1e9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.194:45299/i","pattern":"[url:value = 'http://110.36.72.194:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d403f419-1019-b924-bdad-00000e58a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.188:46150/bin.sh","pattern":"[url:value = 'http://182.117.68.188:46150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15114933-f2b4-85f6-b359-00009950cacc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://96.245.232.233:44492/i","pattern":"[url:value = 'http://96.245.232.233:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d56e5a-863e-3473-f210-0000989a8e42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/i","pattern":"[url:value = 'http://110.37.43.119:54028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dc5980-fbfd-560f-e7a4-0000f15f2628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/bin.sh","pattern":"[url:value = 'http://119.183.3.192:41382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1c2656-d89b-d852-add3-00004b98c8a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/bin.sh","pattern":"[url:value = 'http://42.225.220.81:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea8c142-c11b-ffbd-d25a-00008d84d10b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.162.111:53842/i","pattern":"[url:value = 'http://182.121.162.111:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1c5227-e7f2-10c6-8164-000055f876ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mipsel","pattern":"[url:value = 'http://45.38.249.63/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906a3f94-6d0a-075c-f047-0000fbd5f768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mips","pattern":"[url:value = 'http://45.38.249.63/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d5c33-f2a4-241c-5b1e-0000bae47000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/bbc","pattern":"[url:value = 'http://45.38.249.63/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1154be-4a64-e223-b756-00008fd12e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_powerpc","pattern":"[url:value = 'http://45.38.249.63/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937a4840-b67e-0b57-fa3f-00000c9c95d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86_64","pattern":"[url:value = 'http://45.38.249.63/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1b7492-3a28-6d10-f3d3-0000cbd75cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm4","pattern":"[url:value = 'http://45.38.249.63/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331515be-7a28-98d0-9176-000061de9478","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm6","pattern":"[url:value = 'http://45.38.249.63/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4786a-ead2-294b-8c05-0000876b9f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_aarch64","pattern":"[url:value = 'http://45.38.249.63/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c4404-bea6-812c-88dd-0000736b3b96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm5","pattern":"[url:value = 'http://45.38.249.63/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44122528-daa7-4c6f-55fd-0000d962f31d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm7","pattern":"[url:value = 'http://45.38.249.63/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcba9c71-4abd-4340-26bd-00005705d8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86","pattern":"[url:value = 'http://45.38.249.63/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c47c7f-40df-e36f-fc35-0000b4585ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm6","pattern":"[url:value = 'http://2.26.81.46/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40823716-415d-aa0f-e564-00007f6cd814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189a956e-201f-4a8d-e2ac-0000aad3a799","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/bin.sh","pattern":"[url:value = 'http://222.142.250.250:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dfc762d-92bd-4e17-16ac-0000098df017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/i","pattern":"[url:value = 'http://222.142.250.250:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278a792-5499-5fab-e2dd-0000b579fa82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/bin.sh","pattern":"[url:value = 'http://179.108.89.220:55094/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24c5d007-a061-3424-fb04-00009b0fa02f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/i","pattern":"[url:value = 'http://220.192.252.142:56157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e95cbf-83e3-d6eb-939a-0000f5acb417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/bin.sh","pattern":"[url:value = 'http://1.58.182.84:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fbb00d-913b-ea2a-90f5-0000320453b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/i","pattern":"[url:value = 'http://42.230.18.71:37623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2e2558-1e26-7843-17df-0000a2fce713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/bin.sh","pattern":"[url:value = 'http://42.230.18.71:37623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c587810b-58fd-ef77-cccf-0000a9671503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/bin.sh","pattern":"[url:value = 'http://182.127.177.126:47422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895236e1-b088-9b9c-dc00-0000502f5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/bin.sh","pattern":"[url:value = 'http://27.37.229.199:49596/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4592ec-f262-6a36-a1a4-0000114f3176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.70.28:58014/i","pattern":"[url:value = 'http://110.36.70.28:58014/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab97099a-ed61-fff9-8128-0000bb5bc58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/i","pattern":"[url:value = 'http://182.127.177.126:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83004697-d558-77f6-f66c-0000aa0903db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.113.119:35309/i","pattern":"[url:value = 'http://125.40.113.119:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cec78f5-f66b-da57-77e4-00000923a954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/bin.sh","pattern":"[url:value = 'http://27.201.110.150:57334/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69db9e4-0bfe-e684-9698-0000e124c76c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/i","pattern":"[url:value = 'http://27.201.110.150:57334/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc739be-831a-3d85-4c6f-000030324cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/bin.sh","pattern":"[url:value = 'http://175.174.68.59:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751e6737-dfb4-fd66-5bd4-000005e176cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/bin.sh","pattern":"[url:value = 'http://78.165.236.7:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4736a3c9-48d7-7e90-1527-000020989295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/bin.sh","pattern":"[url:value = 'http://125.45.146.236:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6786d90b-b589-d97d-e7b8-0000ac02f26b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/i","pattern":"[url:value = 'http://78.165.236.7:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222edaa9-cb33-b69f-9484-000085de0339","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/bin.sh","pattern":"[url:value = 'http://59.96.139.213:39951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbb7a1-ab6f-2724-079a-0000dbfb2033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/bin.sh","pattern":"[url:value = 'http://222.137.39.216:48007/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37388c34-a23f-f2a4-9a58-00006820670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/i","pattern":"[url:value = 'http://175.174.68.59:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fd13a7-7302-3f6c-d3cd-00008aa2c18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.31.205:34885/i","pattern":"[url:value = 'http://110.36.31.205:34885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b08c4-1b55-c76f-18ec-00004b07696d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/bin.sh","pattern":"[url:value = 'http://138.255.178.214:43405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b2077-1f11-628a-5db9-0000ccf59756","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/i","pattern":"[url:value = 'http://59.96.139.213:39951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335a2a72-13b9-1dad-6c0e-000047d68d61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/i","pattern":"[url:value = 'http://138.255.178.214:43405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fba612-ddc9-718e-a2d1-000039e6024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/bin.sh","pattern":"[url:value = 'http://105.184.72.21:54289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa76e1a4-becb-2474-652d-0000d404a61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/bin.sh","pattern":"[url:value = 'http://42.231.93.114:47497/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ade7cf-59ba-527a-3ab3-0000d7dd2e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.183.165:44707/i","pattern":"[url:value = 'http://105.186.183.165:44707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbea3596-fb5a-91ee-4ee0-0000ef0648f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/bin.sh","pattern":"[url:value = 'http://36.69.88.195:51348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73204d35-0e3a-a0f1-4b04-0000a86f7326","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/i","pattern":"[url:value = 'http://42.231.93.114:47497/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823c54d6-3ed6-6dc7-880a-00008ccae879","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.4.125:43311/i","pattern":"[url:value = 'http://110.36.4.125:43311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e138016b-42cd-5e1b-5192-000081ede851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.165:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a8ffa4-9e06-a3e4-4183-0000612e667f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.32.70:38815/i","pattern":"[url:value = 'http://105.184.32.70:38815/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d34d0c-5d67-d5cd-2c3f-0000a7610e0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://lomeqpe.com/Update_bde3c4.msi","pattern":"[url:value = 'https://lomeqpe.com/Update_bde3c4.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e2506f-a2a4-c242-172f-000043421742","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/i","pattern":"[url:value = 'http://182.117.78.165:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde58ed3-2d68-c47a-bb6d-00000ed96d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.78:52922/i","pattern":"[url:value = 'http://222.142.252.78:52922/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8401674-f9bb-b7d2-6a49-0000cdca719d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.133.165:47739/i","pattern":"[url:value = 'http://123.129.133.165:47739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd55190-d9f3-cec0-8dd0-00005c7cb73b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fd7237-79d0-39f5-6135-00000b57239b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/bin.sh","pattern":"[url:value = 'http://115.63.203.149:37425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0465d295-ba6e-87a1-d74f-000081780dfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/bin.sh","pattern":"[url:value = 'http://110.37.68.65:46979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e97557-0840-a26b-0a50-0000161baa50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_sh4","pattern":"[url:value = 'http://62.60.249.165/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d111c2-fd70-f837-0e40-0000c450c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm","pattern":"[url:value = 'http://62.60.249.165/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e66e47a-96a1-3573-b4da-000033d35ad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mpsl","pattern":"[url:value = 'http://62.60.249.165/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab9cd22-3c0c-f404-0f02-000003567521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86_64","pattern":"[url:value = 'http://62.60.249.165/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb422b3-4821-2870-0159-000058d03499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mips","pattern":"[url:value = 'http://62.60.249.165/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09a6ce-424e-11c2-570f-0000eec65dd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86","pattern":"[url:value = 'http://62.60.249.165/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30519d5-713a-0f40-6d40-0000945eef21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/bin.sh","pattern":"[url:value = 'http://125.44.32.162:44822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611004e1-1294-f351-4b81-0000258d2a38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.34.229:59705/i","pattern":"[url:value = 'http://105.184.34.229:59705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61f88ab-58af-06d3-eb2b-00005f09e82f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.106.66:43071/i","pattern":"[url:value = 'http://221.14.106.66:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7bb888-4ffc-2661-349a-0000f09b839e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/bin.sh","pattern":"[url:value = 'http://114.228.239.251:54062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5e6568-3b55-83d3-ee9f-000026eb3c9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/i","pattern":"[url:value = 'http://110.37.68.65:46979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ee55d1-ba6d-a363-341e-0000f8437ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/i","pattern":"[url:value = 'http://125.44.32.162:44822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4873e5-3d44-4e53-cd46-0000274ab43d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.141.211:58754/i","pattern":"[url:value = 'http://182.121.141.211:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145aa8a6-d3d2-3e5b-f20b-0000c4e3ea63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/bin.sh","pattern":"[url:value = 'http://219.157.215.95:55907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75a55654-9b78-5ee5-44bc-0000d59e6e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/bin.sh","pattern":"[url:value = 'http://222.141.143.158:55288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1c4408-7ba4-a9f4-644b-00007a71c227","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/bin.sh","pattern":"[url:value = 'http://182.119.29.169:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a316ef38-191e-6382-3dda-0000f33cab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/i","pattern":"[url:value = 'http://219.157.215.95:55907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29394689-93a8-aec7-1227-0000e3b40503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/bin.sh","pattern":"[url:value = 'http://115.57.249.167:38186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf7836b-000c-eca1-d948-00008383cde2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/i","pattern":"[url:value = 'http://115.57.249.167:38186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489bb36c-ed65-2287-f17a-00001d8ec015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/bin.sh","pattern":"[url:value = 'http://180.191.228.111:60353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a48bd9-b134-ef84-2d55-00007fe26d99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/bin.sh","pattern":"[url:value = 'http://115.57.248.80:32935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f88ff3-01f3-42df-174e-00004c8976a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/i","pattern":"[url:value = 'http://182.119.29.169:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce76465-fd88-55d8-768c-000085959591","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/i","pattern":"[url:value = 'http://180.191.228.111:60353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66d4fa3-4212-114c-48e3-00006baae85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/bin.sh","pattern":"[url:value = 'http://115.48.148.23:42173/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733a61a1-043c-5d18-cf2d-00009626f1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/i","pattern":"[url:value = 'http://222.141.143.158:55288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470007e2-1db3-7099-4d55-00001151d7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/i","pattern":"[url:value = 'http://115.48.148.23:42173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caefc07-6093-4b9f-b5a5-0000785e7309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/i","pattern":"[url:value = 'http://175.174.107.238:46076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea2d091-bee0-0efb-1abf-0000b147909c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/bin.sh","pattern":"[url:value = 'http://123.11.201.153:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce4b430-61ff-cc94-fdbc-0000f7d3edef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/bin.sh","pattern":"[url:value = 'http://125.41.2.135:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4932d811-830f-bfb9-9d70-000068a49237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/i","pattern":"[url:value = 'http://123.11.201.153:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86ad91f-9ba6-b4f0-2950-00001e91575b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/i","pattern":"[url:value = 'http://125.41.2.135:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62babce6-46e7-4ca2-c2ed-00003add52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/i","pattern":"[url:value = 'http://115.57.248.80:32935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9913ea-bb8c-e130-97e3-0000b83f7ab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.6.205:46320/i","pattern":"[url:value = 'http://125.41.6.205:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc7c5f-75fa-ffc8-c91e-00009f7984a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/bin.sh","pattern":"[url:value = 'http://116.76.206.254:50342/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a27b90-5ae3-b3fc-9d25-0000fd769fbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.228.78:44625/i","pattern":"[url:value = 'http://110.39.228.78:44625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff627cc0-c4eb-9340-bf8d-000045efe59f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/i","pattern":"[url:value = 'http://110.36.22.249:44558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c01af-17b2-9b29-2ef2-00000d9102ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/bin.sh","pattern":"[url:value = 'http://117.223.140.197:37526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c170bf57-aa3f-2f44-75b3-0000aeddbe11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/bin.sh","pattern":"[url:value = 'http://27.217.139.36:39257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c61ecc-19c4-cf6e-a64e-0000ca857299","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/i","pattern":"[url:value = 'http://117.223.140.197:37526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01720c58-eafc-762c-76a5-0000846765bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/bin.sh","pattern":"[url:value = 'http://222.139.192.15:47283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e6a33e-0d39-45b6-2dfc-000016c02527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_865135af23551105.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_865135af23551105.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd5a6da-0d75-6a92-c4da-00007a8cc833","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/i","pattern":"[url:value = 'http://27.217.139.36:39257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a279e74-56a9-4003-e7c6-0000ed469797","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/bin.sh","pattern":"[url:value = 'http://196.189.69.192:41745/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e1d394-100e-a00b-8a94-000073741146","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/bin.sh","pattern":"[url:value = 'http://27.207.141.23:38567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508016f8-4795-18c1-06de-0000be815161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/i","pattern":"[url:value = 'http://123.190.18.137:43516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7233f350-fd60-92ce-40f9-0000188bb804","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/i","pattern":"[url:value = 'http://222.139.192.15:47283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9845922c-4b68-29cc-2b52-000080e0a735","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/i","pattern":"[url:value = 'http://196.189.69.192:41745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49877565-363a-7992-5420-00009bfed71c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/bin.sh","pattern":"[url:value = 'http://183.48.166.95:59376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d909315-6bdb-bacf-bdd0-000044f86ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/i","pattern":"[url:value = 'http://27.207.141.23:38567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f25ea87-55f8-890d-3fd6-0000ff998715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.187.158.17:55290/bin.sh","pattern":"[url:value = 'http://119.187.158.17:55290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bada289-fcaa-4699-0a66-00002ec464f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/bin.sh","pattern":"[url:value = 'http://182.127.190.111:33526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba24a2e-6251-12e4-fb9b-0000f4eb4bf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/omega/file.exe","pattern":"[url:value = 'http://62.60.226.140/files/omega/file.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d506c90d-5e6d-5386-8c95-00000ff51f1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/i","pattern":"[url:value = 'http://113.230.51.31:34338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904c6fd1-12f2-6fba-c90a-0000e53260ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/i","pattern":"[url:value = 'http://183.48.166.95:59376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b78216-ee5f-5a60-266e-0000b06d46d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/bin.sh","pattern":"[url:value = 'http://182.116.34.137:45967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748d28db-3985-d00c-ab10-0000bbfece3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.62.97:46336/i","pattern":"[url:value = 'http://182.119.62.97:46336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f676717c-47f7-e6b0-d6d0-000026df48d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/i","pattern":"[url:value = 'http://182.127.190.111:33526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38a2343-1b6f-cd47-1e67-0000356e6bbb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/i","pattern":"[url:value = 'http://182.124.9.99:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c016fe3-ef36-6b4b-97de-0000cab06cb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.13.17.211:57271/i","pattern":"[url:value = 'http://95.13.17.211:57271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b538220b-f1be-53ac-8701-000077935444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/i","pattern":"[url:value = 'http://182.116.34.137:45967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734b930-615f-ba6e-1a3d-0000c4ae415d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/bin.sh","pattern":"[url:value = 'http://182.120.10.85:50338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec778d5-c8ab-ad94-00a0-00009dd216c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/i","pattern":"[url:value = 'http://196.190.105.170:60232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ebf153-dc33-6eff-ad52-0000a0f33e23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/bin.sh","pattern":"[url:value = 'http://110.37.43.119:54028/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abe43df-1e20-0807-5511-0000852eb574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/bin.sh","pattern":"[url:value = 'http://222.140.196.94:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ceb1de-c7ee-0828-605b-0000f2632da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/i","pattern":"[url:value = 'http://222.140.196.94:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031ddc07-f20b-f524-b0f8-0000bfb2b5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:48403/bin.sh","pattern":"[url:value = 'http://210.208.110.42:48403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2364339a-4afd-89ee-6268-0000ba46b8da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/bin.sh","pattern":"[url:value = 'http://42.85.15.27:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7438cdb-9a1b-25b0-075a-00000d4958c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/i","pattern":"[url:value = 'http://42.86.137.34:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad23381a-a835-4dad-8a06-0000503fae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/i","pattern":"[url:value = 'http://42.58.252.41:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6926ab9-376e-ef52-6ffc-0000bfeaf1c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.57.85:57947/i","pattern":"[url:value = 'http://42.180.57.85:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc00995-9b29-f4fa-af90-0000450846a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.24.140:51609/i","pattern":"[url:value = 'http://110.36.24.140:51609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e899ffc-1b79-8e2a-94bd-00002a156275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/i","pattern":"[url:value = 'http://110.36.91.33:35795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e99e17-2e9d-516d-334d-0000db0b0d46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/i","pattern":"[url:value = 'http://110.36.72.182:41495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302fe188-d99d-ce6b-b8d7-0000f7e4f052","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/i","pattern":"[url:value = 'http://110.36.1.200:60120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d2fa4-b40e-9d67-acb9-00005b1de420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/bin.sh","pattern":"[url:value = 'http://110.36.22.249:44558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58837e62-be76-0708-038c-00007a28dc5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/bin.sh","pattern":"[url:value = 'http://196.189.35.226:40707/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ad8339-86b0-80f3-0415-000067058fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.94.51:47055/i","pattern":"[url:value = 'http://123.14.94.51:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01fb959a-4c2a-95b6-7011-000022ab2d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/i","pattern":"[url:value = 'http://182.120.10.85:50338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9d4b-40d4-559d-cad3-00007d385d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/bin.sh","pattern":"[url:value = 'http://182.119.120.150:46472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1d6918-e797-9926-fc60-0000317a0b2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://185.141.233.178:38076/i","pattern":"[url:value = 'http://185.141.233.178:38076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6489f685-4fa3-fa54-3f65-0000c50ae11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/i","pattern":"[url:value = 'http://79.106.74.167:44091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460eb40-acb9-2e62-1dcf-000074d48325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/i","pattern":"[url:value = 'http://163.142.77.145:55241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0214d7b-9d3f-393e-cd45-0000a56ce3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/bin.sh","pattern":"[url:value = 'http://182.85.43.191:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb69b60-0e9b-cee5-3ea3-00000c16cbc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/i","pattern":"[url:value = 'http://222.136.169.228:49263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae055804-b736-ca2f-afd0-0000f177ce0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.254.40:36271/i","pattern":"[url:value = 'http://182.119.254.40:36271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52b1bff-8741-8501-ecc5-00004f64432c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.160.44:57722/i","pattern":"[url:value = 'http://222.140.160.44:57722/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055fc2d8-56c0-b39a-0740-000075f4d88a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/bin.sh","pattern":"[url:value = 'http://175.149.87.101:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62a9140-02ee-56f7-28d4-0000370dba55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/bin.sh","pattern":"[url:value = 'http://222.136.169.228:49263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef39c7e-1ee4-9620-63d8-00005359667a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/i","pattern":"[url:value = 'http://182.116.113.206:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9e650-03d0-a92a-c3dc-0000493865d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/i","pattern":"[url:value = 'http://175.149.87.101:45262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f64ca02-48a0-5fd3-4030-00008c380b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/bin.sh","pattern":"[url:value = 'http://74.127.168.68:33881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604db660-7e07-f59c-e562-00000653bafd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/bin.sh","pattern":"[url:value = 'http://175.146.231.101:47081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--399d05c5-b436-b98a-1eb7-000090db0a80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.52/got","pattern":"[url:value = 'http://213.177.179.52/got']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe79ed9-fd77-da10-2e34-0000a7829b41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/bin.sh","pattern":"[url:value = 'http://27.156.139.177:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a4c8a9-2897-865a-9175-0000f0471972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.83.220:36412/i","pattern":"[url:value = 'http://125.40.83.220:36412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2ed00d-8756-17ba-f42a-0000a1401ec2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/i","pattern":"[url:value = 'http://140.237.44.234:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e13ec8f-0c70-1c7b-a531-0000686ae433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/bin.sh","pattern":"[url:value = 'http://119.116.142.166:55362/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a367c386-4e3f-a71a-fbde-000022cf5249","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/bin.sh","pattern":"[url:value = 'http://140.237.44.234:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0855ec-ed5a-a125-2600-00009d994db6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/i","pattern":"[url:value = 'http://42.231.64.252:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9c90ae-93b0-98b7-a516-0000af68604e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/i","pattern":"[url:value = 'http://221.15.14.56:52752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5b2cd-7c64-5611-e199-00006b929af3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/i","pattern":"[url:value = 'http://125.40.122.70:48495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49e4caa-73f8-4c16-1a47-00006be22396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/i","pattern":"[url:value = 'http://37.54.4.193:56949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5643e3-afb3-96f9-9eaa-0000068ec34a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/bin.sh","pattern":"[url:value = 'http://42.231.64.252:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5151065-11fd-df12-55fa-00009d75ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/i","pattern":"[url:value = 'http://124.161.116.2:53893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27335015-03c2-2e45-0a31-0000ebf01850","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/i","pattern":"[url:value = 'http://42.4.250.38:55169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8048fbd-f0ee-9da4-90f5-0000828668c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/i","pattern":"[url:value = 'http://222.141.21.106:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16059879-16d6-20e7-cc55-000066a4e2fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.201.196:57604/bin.sh","pattern":"[url:value = 'http://110.38.201.196:57604/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fee6233-ff8c-3223-2e3a-0000c222d852","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/i","pattern":"[url:value = 'http://182.85.43.191:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f37f26-3f11-7049-7297-000044a5b9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/bin.sh","pattern":"[url:value = 'http://27.207.229.26:38938/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ee9ad1-e228-7bb2-4458-0000b421b727","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/i","pattern":"[url:value = 'http://74.127.168.68:33881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae95c9e-7c36-1ccb-1d79-0000cc23981a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.94.20:34018/i","pattern":"[url:value = 'http://42.233.94.20:34018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5af90d5-e05e-8dc6-7c6e-0000481c86a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.34.242.96:52648/i","pattern":"[url:value = 'http://37.34.242.96:52648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744c5dea-f565-9744-20b2-0000207c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/i","pattern":"[url:value = 'http://175.148.111.17:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f012ba7a-cf3e-be9d-e368-000040839fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/bin.sh","pattern":"[url:value = 'http://123.185.91.133:52353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714c2b80-5cf1-989a-20a4-00001c59ae8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/i","pattern":"[url:value = 'http://27.156.139.177:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fa30-daa5-f8ec-612c-0000a1f14d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/bin.sh","pattern":"[url:value = 'http://175.148.111.17:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0973c49b-2b1d-3e3b-8dd5-000063aa207a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/bin.sh","pattern":"[url:value = 'http://42.4.250.38:55169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce69cc0-192e-d69a-c359-0000f1445189","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/bin.sh","pattern":"[url:value = 'http://163.142.77.145:55241/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6c02d-994d-9f74-6081-000030ac4118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/i","pattern":"[url:value = 'http://42.85.15.27:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92987675-2dc4-9ed3-75af-000021fd2a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/i","pattern":"[url:value = 'http://124.235.207.2:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a859b70-1aa5-898b-a294-0000afe0091a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.159.141:53442/i","pattern":"[url:value = 'http://123.189.159.141:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc3ac03-495f-47ef-0437-0000f6ef9b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.196.33:49245/i","pattern":"[url:value = 'http://125.47.196.33:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e30d327b-089f-8589-0c63-00003f13ea30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:40967/bin.sh","pattern":"[url:value = 'http://210.208.110.130:40967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313d10a2-3a6b-e477-cace-00003c2092d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.219:54088/i","pattern":"[url:value = 'http://182.129.144.219:54088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0215cec-619f-490c-5522-00000ee96ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.227.206.54:44703/i","pattern":"[url:value = 'http://42.227.206.54:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886801a4-7156-d605-5a90-0000707568b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/i","pattern":"[url:value = 'http://119.116.142.166:55362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51504dbb-b65c-8532-2f1b-000013c134b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/bin.sh","pattern":"[url:value = 'http://110.36.91.33:35795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d45077-c3e4-4f00-88a6-00009ecd703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.239.253:51695/i","pattern":"[url:value = 'http://110.39.239.253:51695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a0ba7e-65ee-5d62-a3bc-000062e5e56f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.187.252.24:54389/i","pattern":"[url:value = 'http://60.187.252.24:54389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc50d4-74f5-3253-5b43-00004b281b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/i","pattern":"[url:value = 'http://110.37.44.119:37578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bba94-1e01-0e3f-b7f9-0000ca26ab67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/i","pattern":"[url:value = 'http://42.237.4.138:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321b5482-fabe-e712-b92d-00004275dbce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/i","pattern":"[url:value = 'http://119.183.3.192:41382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74705f84-e1ec-1044-455a-00007f6cc621","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/i","pattern":"[url:value = 'http://42.179.125.40:42620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c69684b-b93a-53de-e904-000011f31ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.125:39910/i","pattern":"[url:value = 'http://120.84.214.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf1709f-76c2-32cf-6176-0000e7bc01b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/i","pattern":"[url:value = 'http://115.52.194.55:43061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b78e0c-47e2-a969-ec8a-00000d692fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/i","pattern":"[url:value = 'http://116.2.53.55:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d8dd65-7415-feab-a7e8-000006f4adf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/bin.sh","pattern":"[url:value = 'http://37.54.4.193:56949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65571c7-9f21-3531-ab21-00004db32841","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.184.12.198:38434/i","pattern":"[url:value = 'http://119.184.12.198:38434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2360b6-1d6d-95cc-d121-0000f23fdda6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/i","pattern":"[url:value = 'http://116.53.20.49:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddbb64c-5477-1809-617f-00002e683325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.133.4:35951/bin.sh","pattern":"[url:value = 'http://183.23.133.4:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aadb10-d97b-50c6-f850-0000bc9fb0cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.149.40:50481/i","pattern":"[url:value = 'http://115.56.149.40:50481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8cdcd8-3abf-b422-82e0-0000be6f64c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/i","pattern":"[url:value = 'http://221.1.247.58:51510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0819dc-9459-526a-8dc0-0000e53ea82d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/i","pattern":"[url:value = 'http://196.189.35.226:40707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5648dd17-6109-43f0-acb5-0000a18e82fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.121.20:34150/bin.sh","pattern":"[url:value = 'http://115.49.121.20:34150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4b6dd-2ae5-43ff-afac-000012038d51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/bin.sh","pattern":"[url:value = 'http://110.37.44.119:37578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3115c51-e313-0c99-7bca-0000e5b63340","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/bin.sh","pattern":"[url:value = 'http://42.235.73.160:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537bf4a0-39cd-03ff-4649-00009a099490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.94.194.151:60883/bin.sh","pattern":"[url:value = 'http://124.94.194.151:60883/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ec46d2-84a6-f0eb-9e8c-000075e4e2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/bin.sh","pattern":"[url:value = 'http://221.15.14.56:52752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a4e335-d62c-9d37-aa1d-0000723ea5e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.94.94:33716/i","pattern":"[url:value = 'http://42.235.94.94:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c63b73-8572-ab20-e5e2-0000ec741bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.22.216:55052/i","pattern":"[url:value = 'http://110.37.22.216:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4cbaa3-e48b-53c1-3a89-00004e08ed93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.168.69.141/p1.sh","pattern":"[url:value = 'http://83.168.69.141/p1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17426656-6147-e699-d2bb-00003732fb26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.230.79.157:47435/bin.sh","pattern":"[url:value = 'http://115.230.79.157:47435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b42b6e2-964e-722f-3227-0000745d6869","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:32939/i","pattern":"[url:value = 'http://200.115.102.246:32939/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d0b222-8c67-3c6d-265c-00009f9fc907","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/bin.sh","pattern":"[url:value = 'http://196.190.105.170:60232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1694efb3-ff05-f421-fd6c-00001deabd8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.95.26:40959/bin.sh","pattern":"[url:value = 'http://163.142.95.26:40959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9d3d72-0f87-5033-8e90-000047555ef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/i","pattern":"[url:value = 'http://123.185.91.133:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5199ff-c274-eeae-a0de-0000f601211c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/i","pattern":"[url:value = 'http://182.240.11.199:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf8123a-7278-88eb-4da4-000016182fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/i","pattern":"[url:value = 'http://113.239.64.220:36469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b8f358-1d34-ddde-e596-00006cf2b3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.213.104:40820/bin.sh","pattern":"[url:value = 'http://182.126.213.104:40820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c966e0-3ee8-e921-77ca-00008c8b23c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/i","pattern":"[url:value = 'http://36.70.226.107:53300/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626338d9-cbf2-670b-5089-0000b50ac76a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.197.32.42:36155/i","pattern":"[url:value = 'http://115.197.32.42:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a5ec21-1752-0223-75c8-0000998e822f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/bin.sh","pattern":"[url:value = 'http://182.116.113.206:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91ef35c-8613-9442-977d-0000544e1d9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.58.42.29:40746/bin.sh","pattern":"[url:value = 'http://59.58.42.29:40746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdbb74f-153d-ecf7-f8a8-00003535bc6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/bin.sh","pattern":"[url:value = 'http://60.21.174.229:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad626489-7ddd-2032-03e2-0000b8bfcbdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.78.61:33716/bin.sh","pattern":"[url:value = 'http://42.59.78.61:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627e454b-f6e2-ec05-8b8c-0000b20ac096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/i","pattern":"[url:value = 'http://60.21.174.229:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bb9700-4d19-c892-e836-000096c533a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_ppc","pattern":"[url:value = 'http://62.60.249.165/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ba5237-6b00-e10e-80bc-0000766bd3ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/bin.sh","pattern":"[url:value = 'http://27.215.124.43:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef3ba3-2207-570e-8543-0000234fb6a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/i","pattern":"[url:value = 'http://27.215.124.43:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159de90d-be1d-8fc7-cb8a-0000fdac71b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:36140/bin.sh","pattern":"[url:value = 'http://95.9.35.137:36140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38663ca-b84f-0c25-a99e-0000224548ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/bin.sh","pattern":"[url:value = 'http://59.97.254.10:40659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec5c48c-d080-b203-be4a-000058c183d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:60655/i","pattern":"[url:value = 'http://36.88.136.194:60655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb292cb-bc90-df3f-f9f4-00000f940689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/i","pattern":"[url:value = 'http://59.97.254.10:40659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0edcd9-9ba8-17c8-f272-0000bc1becb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/bin.sh","pattern":"[url:value = 'http://61.53.1.186:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753fe9bb-abf9-3b98-4189-000004a731b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/bin.sh","pattern":"[url:value = 'http://182.115.232.200:58187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380904f4-58c8-f760-9434-00005b0be33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/i","pattern":"[url:value = 'http://61.53.1.186:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def3113b-b04c-485e-f5e5-0000ab25cfb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/i","pattern":"[url:value = 'http://105.184.72.21:54289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac5b9f1-3747-fc49-129d-00009e797f0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.156.143:47860/i","pattern":"[url:value = 'http://123.132.156.143:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9869c966-0d2f-a102-a4a0-0000967a475f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/i","pattern":"[url:value = 'http://182.115.232.200:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ae2b543-3395-eaf7-48c6-0000511cafa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/bin.sh","pattern":"[url:value = 'http://98.36.141.73:43074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a1e913-8916-4cb9-3bf7-0000c47b83ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.187.252.24:54389/bin.sh","pattern":"[url:value = 'http://60.187.252.24:54389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e07aaa-0d11-b2c7-ce8b-00005543ee9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/i","pattern":"[url:value = 'http://98.36.141.73:43074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344d7c0c-48c6-3e79-7802-0000768bb729","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/bin.sh","pattern":"[url:value = 'http://115.57.228.213:55432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7082afca-9d4b-9038-62bc-000042671462","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/i","pattern":"[url:value = 'http://222.142.222.21:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144358a-5d27-ddab-2829-0000cb549c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/bin.sh","pattern":"[url:value = 'http://182.117.131.145:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed7bb65-9a72-ac00-a7ef-0000a5ec7c1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/i","pattern":"[url:value = 'http://115.57.228.213:55432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5257267-55c7-07ab-f3cd-0000efe3579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/i","pattern":"[url:value = 'http://182.117.131.145:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385e945f-80cc-4367-0189-00000a681ff6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/bin.sh","pattern":"[url:value = 'http://182.117.30.230:43216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9594d047-91a5-bce0-2761-0000f7f94c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/bin.sh","pattern":"[url:value = 'http://110.36.1.200:60120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d65fa4-9b76-cc11-12b1-0000789486e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/i","pattern":"[url:value = 'http://115.55.10.187:42654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44537ca1-c884-66a5-33cc-00005d244409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131d8f9f-762a-18de-7be0-0000dd24522d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f581d065-65cb-d199-4ae6-0000a1ed3a39","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c4f5c-8898-62be-f210-0000f2309dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/Mozi.a","pattern":"[url:value = 'http://218.0.112.226:51471/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528c4962-f96e-6d91-205e-00007a9061f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856c2f59-8f1e-fcf9-3330-0000c103450a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/loader.sh","pattern":"[url:value = 'http://103.77.246.150/loader.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01f4bbd-6a44-bfb4-81a9-0000a775b306","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3589e251-7ce4-7230-3b2f-00006124abf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.krypton-client.net/assets/krypton-free.jar","pattern":"[url:value = 'https://www.krypton-client.net/assets/krypton-free.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3da7160-9487-a529-061b-0000ec83fd20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar","pattern":"[url:value = 'https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0307c5-de1f-3f93-bf5d-0000b55ad6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6634c1-6451-2fd3-3b50-00007be08e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.127.232.94:58633/Mozi.m","pattern":"[url:value = 'http://111.127.232.94:58633/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914319d2-0eb1-2862-4b01-00000eae1d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/Mozi.a","pattern":"[url:value = 'http://105.186.143.37:55447/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6024f026-0fae-e89a-22c5-0000e0097af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6335dc6b-5805-0b43-62f2-0000cbca2f3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/cat.sh","pattern":"[url:value = 'http://77.239.124.108/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ec555e-d309-ed2e-9f24-0000fc244181","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47cdca74-07e5-ccb2-4801-0000734e04ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/bin.sh","pattern":"[url:value = 'http://110.37.5.157:44447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8357a5bb-a786-bb43-a7c0-00001b02d827","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.30.151:34327/i","pattern":"[url:value = 'http://115.49.30.151:34327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c41ca4-c7db-f89d-dca7-00005079eb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/bin.sh","pattern":"[url:value = 'http://219.157.243.71:34099/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60d056c-7ed7-5473-eb80-0000b67dffa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/i","pattern":"[url:value = 'http://110.37.5.157:44447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf65246-a73b-32cc-65db-00005c32dc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/i","pattern":"[url:value = 'http://182.117.30.230:43216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02b7e1a-473d-d3af-07ba-0000f8c7cef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/i","pattern":"[url:value = 'http://219.157.243.71:34099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e5211e-abf1-4fb6-7099-0000be31c8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/bin.sh","pattern":"[url:value = 'http://196.190.224.62:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7836a55c-9b24-221e-e479-00008d1a4f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/bin.sh","pattern":"[url:value = 'http://110.36.72.182:41495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f4fbb6-dbd6-8a6e-0f93-0000783dc956","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/bin.sh","pattern":"[url:value = 'http://59.96.138.90:37638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2dc968-8bbd-a5a6-15fb-0000ed55ef0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/i","pattern":"[url:value = 'http://196.190.224.62:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb15362-5063-ed78-fce5-000092d5d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/gfg.sh","pattern":"[url:value = 'http://62.60.249.165/gfg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c25923-0407-83a0-64f1-0000d06ef867","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm5","pattern":"[url:value = 'http://62.60.249.165/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87981665-ec16-ecab-f883-00005826e243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_m68k","pattern":"[url:value = 'http://62.60.249.165/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d18427-8f8d-852f-f856-0000674faa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/scanner","pattern":"[url:value = 'http://62.60.249.165/scanner']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcc380f-25db-21ed-9c4b-00007a6730ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm7","pattern":"[url:value = 'http://62.60.249.165/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cb0899-bd34-a5e1-57bb-0000c2db5789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm6","pattern":"[url:value = 'http://62.60.249.165/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a768d01-6b25-1739-ad65-0000c2ff1dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/pandora.x86_64","pattern":"[url:value = 'http://2.26.81.46/pandora.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a1d836-4bb7-61b3-df79-00003ca00032","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/i","pattern":"[url:value = 'http://42.239.179.192:41888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2688cff4-e794-3548-ce96-0000e9ba5e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/i","pattern":"[url:value = 'http://59.96.138.90:37638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fae566d-19d5-6e7b-cc9e-000069f6699f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.127.19:51010/i","pattern":"[url:value = 'http://115.49.127.19:51010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1800d4d-3385-5de4-1e5f-0000d422a681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.186.227:47974/i","pattern":"[url:value = 'http://42.231.186.227:47974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dd9e16-1ee6-1e78-e8fe-0000fb7d93e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/bin.sh","pattern":"[url:value = 'http://200.115.102.2:47663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f547103e-43be-d6a8-11ea-000078f94ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/bin.sh","pattern":"[url:value = 'http://125.45.64.24:42706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063db189-7502-3977-d04d-0000bf24b64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/i","pattern":"[url:value = 'http://125.45.64.24:42706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2f28fc-4731-413d-4b58-0000be245cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/bin.sh","pattern":"[url:value = 'http://115.50.101.188:34800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a70ea3-51ea-7fba-2824-0000f979bdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/i","pattern":"[url:value = 'http://113.221.8.44:56847/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baece3-790e-82cc-b2c7-000086adcdd1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/bin.sh","pattern":"[url:value = 'http://125.110.49.243:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cc01a-4b59-1f1d-c887-00001ce5d817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/i","pattern":"[url:value = 'http://115.50.101.188:34800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c8adc0-ea39-505a-cc66-0000ebcf5b7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/i","pattern":"[url:value = 'http://125.110.49.243:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfcf94c-e657-c723-7078-0000fc83d585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/i","pattern":"[url:value = 'http://1.58.182.84:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae7f9a0-355d-e306-3d1e-0000d61e356b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/bin.sh","pattern":"[url:value = 'http://182.121.82.149:47697/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92dbdab0-b3b7-2cbf-9ccc-00005bfe9de5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.38.188:51859/bin.sh","pattern":"[url:value = 'http://115.51.38.188:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496383ad-1945-858e-4a79-0000e1c370be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/i","pattern":"[url:value = 'http://182.121.82.149:47697/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f18da8-dda3-980e-a17b-0000678a6de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.159:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e2ec56-3ac7-18a0-57f8-00002088283c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.159.139.237:45921/bin.sh","pattern":"[url:value = 'http://46.159.139.237:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29605262-68f3-62d3-2f88-00007a1a0447","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/i","pattern":"[url:value = 'http://182.121.231.159:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb91add-6df9-a21a-c28f-000073b712c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.66.196:56771/i","pattern":"[url:value = 'http://175.174.66.196:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b249ff0-39ee-1b79-c5c2-00008b684471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/bin.sh","pattern":"[url:value = 'http://156.146.24.110:48908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea65ea02-e0ad-3205-f247-00006ebb1f9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/bin.sh","pattern":"[url:value = 'http://39.90.150.62:51319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd1722e-f723-aab5-0493-00002a78d76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.118.104:55662/bin.sh","pattern":"[url:value = 'http://182.116.118.104:55662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833ab1b6-9513-9c34-4605-00000e7781c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/bin.sh","pattern":"[url:value = 'http://123.10.155.173:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fba365-6cce-8a45-3832-0000152f88bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/bin.sh","pattern":"[url:value = 'http://196.189.68.239:58818/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c898fc30-7a44-f84f-ce11-000096c01531","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/i","pattern":"[url:value = 'http://156.146.24.110:48908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672f6326-de12-8e63-a814-00002db77aa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.223.172:43584/i","pattern":"[url:value = 'http://110.38.223.172:43584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89987a17-b6f2-bc68-ae64-0000c61b7ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/bin.sh","pattern":"[url:value = 'http://110.37.61.166:60696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d354151b-d866-88f6-09d0-0000bfb67a15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/bin.sh","pattern":"[url:value = 'http://182.124.119.64:56849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e8c1a06-da75-f835-bf19-0000a4d80c92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/i","pattern":"[url:value = 'http://39.90.150.62:51319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4647bad1-97aa-754b-5bed-00008eaf88ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/i","pattern":"[url:value = 'http://123.10.155.173:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc24cc34-6b72-01bf-962e-00008c5874cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/i","pattern":"[url:value = 'http://110.37.61.166:60696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75688d70-f3b5-9aa4-1b38-00006dc322e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/i","pattern":"[url:value = 'http://196.189.68.239:58818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824a684-8896-d507-9787-0000d6140904","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.40.110:37931/i","pattern":"[url:value = 'http://221.14.40.110:37931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7d5d86-f50d-d81e-814b-0000306f0cbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/i","pattern":"[url:value = 'http://182.124.119.64:56849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c39af0e-8e1c-d457-98b5-000088724006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/bin.sh","pattern":"[url:value = 'http://222.127.53.189:49946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fef49df-2702-abf7-ce39-000063ad3c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/bin.sh","pattern":"[url:value = 'http://125.40.122.70:48495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54e351f-e37d-47e3-6079-0000d0590f77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/bin.sh","pattern":"[url:value = 'http://119.116.88.117:40271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91e4219-21ed-d3a5-fe16-0000dfc1cd6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/i","pattern":"[url:value = 'http://222.127.53.189:49946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad87e6d7-9c17-e714-76d7-00000748245f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.247:53078/i","pattern":"[url:value = 'http://110.186.231.247:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e164047-ca1c-ca12-aab7-0000850e24f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.124.137:52075/i","pattern":"[url:value = 'http://61.53.124.137:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb9ff2-58dd-65b4-4628-000083374ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/i","pattern":"[url:value = 'http://175.146.231.101:47081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61fc4fc-1adb-969f-ed2e-00006a36d003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.38.162:51120/i","pattern":"[url:value = 'http://222.139.38.162:51120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f0f8cc-bd90-4cde-5b42-00000d1bb3bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/i","pattern":"[url:value = 'http://115.63.203.149:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63abdbbb-a386-a64d-ee34-00001eb53288","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7782139129/Tz2SZvL.exe","pattern":"[url:value = 'http://62.60.226.140/files/7782139129/Tz2SZvL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c636e713-596c-195e-07f5-00003493a8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.159.154.179:36339/i","pattern":"[url:value = 'http://27.159.154.179:36339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aefbfad-d0b7-d7ed-1e64-0000763ec679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.24.217.164:45145/bin.sh","pattern":"[url:value = 'http://117.24.217.164:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6674e6a7-a6c6-8bcd-4781-0000770def62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/i","pattern":"[url:value = 'http://112.228.4.224:58279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b99314-489a-5915-09e6-000007889cb4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/bin.sh","pattern":"[url:value = 'http://222.138.150.155:55809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72345d8-0598-101f-0e5f-00005885ebf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/bin.sh","pattern":"[url:value = 'http://108.170.136.155:37224/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6e3aad-3975-2bb0-afa1-0000aa7519e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/i","pattern":"[url:value = 'http://39.78.26.151:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c864874-e1e2-1283-3da7-00009bf566b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/bin.sh","pattern":"[url:value = 'http://42.239.152.98:57265/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aceedf8e-2c43-5091-f034-00005ecf6527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/i","pattern":"[url:value = 'http://222.138.150.155:55809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--468bfc83-85c5-3866-f9c7-0000d5661428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/i","pattern":"[url:value = 'http://108.170.136.155:37224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a00a2d-a284-e66c-d7a8-0000e8dadb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/i","pattern":"[url:value = 'http://42.239.152.98:57265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7da6ba8-fdf6-91ca-6a66-0000c312c017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/bin.sh","pattern":"[url:value = 'http://112.228.4.224:58279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e30f3-49e6-be33-575d-00001061c278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/i","pattern":"[url:value = 'http://182.112.13.24:36195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc62cef-2ec3-2fcb-a5cf-00001dfede47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/bin.sh","pattern":"[url:value = 'http://59.97.249.15:59820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b52e8c4-dcad-e352-5100-000071123215","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/i","pattern":"[url:value = 'http://59.97.249.15:59820/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5813af9-89b3-fefe-ceb7-0000f17560cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/bin.sh","pattern":"[url:value = 'http://42.179.238.52:48748/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1930b0e-f963-7bca-f504-0000741a7350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/bin.sh","pattern":"[url:value = 'http://72.255.30.244:42024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a625143-7c22-9169-d4ce-000086b61a7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/bin.sh","pattern":"[url:value = 'http://123.133.101.151:58126/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df3ab0e-48da-1b14-e0db-000097afae4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/dp.sh","pattern":"[url:value = 'http://191.44.112.89:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2929244-77b9-04a2-277c-0000de937ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x86","pattern":"[url:value = 'http://191.44.112.89:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1336063e-52c5-7eaf-2732-00004363bf38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc440","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c687d3b9-5f43-79a9-d187-0000e73000a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mips","pattern":"[url:value = 'http://191.44.112.89:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f8f993-4692-84a1-50a4-00007d3b63b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm6","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf1a829-5816-5af8-8720-00006f8ecc56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm5","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7241dd-43d1-ccbe-bf22-0000264e8d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sh4","pattern":"[url:value = 'http://191.44.112.89:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1397891f-1d95-b47f-f51c-000067268415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i486","pattern":"[url:value = 'http://191.44.112.89:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ffc905-4f8c-f98b-c4ef-0000c58704dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm7","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf698bf-1c14-a958-9e77-0000d732ab33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm4","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--378af076-6a83-4173-4c0a-0000bddbdaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mipsel","pattern":"[url:value = 'http://191.44.112.89:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f20a38a-2b98-80cd-e546-0000a6901495","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21fdee6-a806-1322-4f6c-0000cbaa0c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x64","pattern":"[url:value = 'http://191.44.112.89:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10135d71-003f-4963-1831-00002aee251e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i686","pattern":"[url:value = 'http://191.44.112.89:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aabe76f-d135-1ccc-2f2c-0000e7c6d672","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.m68k","pattern":"[url:value = 'http://191.44.112.89:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42fc9a64-768d-2196-5253-0000840dfab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sparc","pattern":"[url:value = 'http://191.44.112.89:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5ab6bb-1d70-2fe1-8e1b-0000045ce5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/bin.sh","pattern":"[url:value = 'http://183.188.204.211:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9fe53e-7439-23a2-ee2e-0000993a0475","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/i","pattern":"[url:value = 'http://42.179.238.52:48748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--221248f2-3497-f820-9e7b-0000892f5677","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/JutrvoService.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/JutrvoService.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e45969ca-d448-ddc4-9a70-0000cec66f62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/i","pattern":"[url:value = 'http://123.133.101.151:58126/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69231027-bb44-ad54-7a07-000021d17681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/i","pattern":"[url:value = 'http://183.188.204.211:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f588313-730a-3d5a-28d6-00009f084a96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.100.231:50864/bin.sh","pattern":"[url:value = 'http://27.37.100.231:50864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e8e993-1d99-8daa-2b15-00002a4e61a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/bin.sh","pattern":"[url:value = 'http://115.55.114.89:40814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d59f910-6679-50f7-5e88-00003f995547","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:54748/i","pattern":"[url:value = 'http://110.36.86.83:54748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ace7db-19b5-8140-1972-0000bbf515a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.30:42974/i","pattern":"[url:value = 'http://59.96.142.30:42974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3339e01e-346c-ab0e-76db-0000e3b5b003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/i","pattern":"[url:value = 'http://115.55.114.89:40814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d235a3db-f845-7b5e-2e52-0000a633b4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/bin.sh","pattern":"[url:value = 'http://116.248.123.33:49271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca328f-15af-138d-7bf3-000088de6636","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.104:47860/i","pattern":"[url:value = 'http://112.242.56.104:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360bbd8f-ad9c-7a96-eb35-0000d8a61058","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/bin.sh","pattern":"[url:value = 'http://124.131.148.213:44472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7739dac5-bdea-c221-3cb7-000047c0b4ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/i","pattern":"[url:value = 'http://119.116.88.117:40271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61767ce7-f675-b129-6285-000062376119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/bin.sh","pattern":"[url:value = 'http://42.224.248.160:54570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70aaf821-817f-8425-30ab-0000279f484a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/i","pattern":"[url:value = 'http://116.248.123.33:49271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c6080a-b9da-58fe-34e7-0000433f2da5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/i","pattern":"[url:value = 'http://124.131.148.213:44472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63f8a4-a3a7-367a-d2e3-000022d9eb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/i","pattern":"[url:value = 'http://222.137.19.202:54735/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--855efb82-dec7-974c-942e-00006d5cce40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.239.201:47209/i","pattern":"[url:value = 'http://123.12.239.201:47209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6037b1-cef8-731a-43ec-0000ed5f10f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/i","pattern":"[url:value = 'http://42.224.248.160:54570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60370ee7-1b80-cb00-831a-00007ee50b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/bin.sh","pattern":"[url:value = 'http://42.239.188.2:43535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56104ee3-db83-0247-c57b-00002c9f59ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/i","pattern":"[url:value = 'http://115.52.190.59:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3d4bf1-7531-bad2-d2f8-00000b9586bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/bin.sh","pattern":"[url:value = 'http://112.198.193.5:33801/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6321193-52de-b70e-03ec-0000902d3171","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad4faec-01f9-5556-b887-00003b63733a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cca54e-6b64-1626-dc8d-0000cfd02396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/bin/support.client.exe","pattern":"[url:value = 'http://77.83.39.9/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f702dc6-6383-6fc5-efe6-0000117b84e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.142/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f9af0e-8172-0f80-e914-00001316823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9611308f-7540-e24f-5a1a-0000abe90f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39018ba-597c-2ae7-106a-00004eab35a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--155b2292-e1df-eaf2-9938-000051eae779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/i","pattern":"[url:value = 'http://42.239.188.2:43535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319e3f42-0ec5-a5c9-6a34-0000c801884e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/i","pattern":"[url:value = 'http://112.198.193.5:33801/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17770e1-9d1a-e466-5b5a-0000bd0862e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/i","pattern":"[url:value = 'http://182.118.246.94:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543701ab-f497-cbaa-54d1-000080fd6335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/bin.sh","pattern":"[url:value = 'http://112.239.122.112:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e9c8-3077-4f4b-60cb-0000b61e283e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.43.152:53485/i","pattern":"[url:value = 'http://182.113.43.152:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60e58e-4d85-53e0-4d01-00007166159b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/bin.sh","pattern":"[url:value = 'http://222.138.182.37:37037/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ac8c76-8e2e-8a97-99da-0000ec5c69ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/i","pattern":"[url:value = 'http://112.239.122.112:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6159c63-87a3-423d-3a80-00000ece118c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.238/s.ps1","pattern":"[url:value = 'http://94.154.32.238/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dc707b-6b9f-63f1-2d68-00000c8825d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online/asset/update.dat","pattern":"[url:value = 'http://newstan.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6847d0-fca4-a5da-c80b-000085ae40e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://171.213.150.35:35745/i","pattern":"[url:value = 'http://171.213.150.35:35745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7820b6-c154-f582-1266-0000feff1aea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.161:44359/i","pattern":"[url:value = 'http://182.114.255.161:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a101cc-9347-538f-1862-0000d40988f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/i","pattern":"[url:value = 'http://222.138.182.37:37037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd86a203-eefc-2ba4-091a-00006eda0374","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/bin.sh","pattern":"[url:value = 'http://221.202.206.125:41411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1922b7-c218-35bb-25c9-0000f7be43e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/bin.sh","pattern":"[url:value = 'http://115.55.130.218:47315/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dae89c3-78f8-0c55-7626-0000bcb0c0c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/bin.sh","pattern":"[url:value = 'http://114.227.49.3:38196/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec032b81-7a6c-af5e-d093-0000fbf89826","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/i","pattern":"[url:value = 'http://114.227.49.3:38196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f99478-a1d5-e9b1-36ba-00007fd879f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/bin.sh","pattern":"[url:value = 'http://125.44.181.178:58549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35528b31-f606-2441-b53a-00008ccdbb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/i","pattern":"[url:value = 'http://221.202.206.125:41411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782d68e4-cbde-54a6-62f0-0000b2668070","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/bin.sh","pattern":"[url:value = 'http://218.91.14.121:32924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0b0b44-9b97-31f1-ee7f-0000f7c3600a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/i","pattern":"[url:value = 'http://125.44.181.178:58549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36b7b9d-ac49-4e6d-8c57-000017167613","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/i","pattern":"[url:value = 'http://218.91.14.121:32924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccbc1a2-f238-72f3-eb7c-0000f0dd319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/i","pattern":"[url:value = 'http://116.140.186.83:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366ff72c-7442-2514-3a10-000043d1f1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/i","pattern":"[url:value = 'http://42.59.204.16:37885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81cc137-903e-cc88-d982-000013b20c23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.184.118:41931/i","pattern":"[url:value = 'http://119.165.184.118:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60848353-cfef-e5cf-7857-000060f75996","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.127:40959/i","pattern":"[url:value = 'http://120.84.214.127:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4322f164-20ee-d08c-4100-0000636fb709","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/bin.sh","pattern":"[url:value = 'http://123.188.223.103:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184b38eb-468a-1ecd-2f22-0000a7505e14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.223:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f4cac8-f2e8-f9fb-bca4-0000e00f8b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/bin.sh","pattern":"[url:value = 'http://218.29.28.21:33666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6481f14-a9ce-5a4b-ee2a-00005a048998","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.25.33:32877/i","pattern":"[url:value = 'http://110.36.25.33:32877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b327f6-6f52-d877-1022-0000cd921ad6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/bin.sh","pattern":"[url:value = 'http://222.139.69.87:33578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aab24c-7adb-3121-ff6b-00006d06b76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/i","pattern":"[url:value = 'http://125.42.65.22:32872/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7fd3c57-0594-5a3f-ffb8-00002d7a8a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0851d22-3b90-4b3a-9b15-0000ad01cc33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47a7b4e-66a6-b39a-2e4d-0000f269ddaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload.exe","pattern":"[url:value = 'http://newstan.online:8443/payload.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8816d7-1459-5008-bcc3-0000834bd874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1db98da-aa7c-235b-c464-0000dcf1fef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4bd89774939d.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4bd89774939d.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e308c965-2a5e-fe1d-a4ad-0000ae89a8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4b870df50ce6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4b870df50ce6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140a958-3d13-abe5-b450-00009fc07cb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux.exe","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ef1ce9-b2ee-889a-42b2-000084870ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7d9cbf-0fa6-f9f4-41c1-0000c93434cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7182b6e8e7b6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7182b6e8e7b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae4ae7e-1c40-b2b2-a894-00003dfab738","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9cea2d96337e.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9cea2d96337e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928868d-7d8c-336f-1319-000045f75a03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7333cef1df5b.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7333cef1df5b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6872fe71-6332-fe62-c45d-000095719b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7296bb21486f.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7296bb21486f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda619a0-6eb8-7140-37d5-000089bbb7c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7441f57b1a78.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7441f57b1a78.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3fd13f-7e4f-64e0-0476-0000f5043e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9c2f86cabdb2.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9c2f86cabdb2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0c3a24-a51b-f9de-07bc-0000e72d391b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7a9ae6f1d608.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7a9ae6f1d608.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e8ca8e-c6a3-19a1-6797-00008019269f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb73a84c0c2684.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb73a84c0c2684.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b7de9d-ea0d-36fc-303a-00004b03a075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7296bb21486f.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7296bb21486f.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd25f24f-1c0e-51f8-8087-0000e23ed8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cef6566cc70.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cef6566cc70.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc741b51-ab73-dd08-add4-000067567f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7ca62cfb04e6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7ca62cfb04e6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c4ed10-2a00-01ae-e694-00009f896da7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80faf1d3-5731-37f2-8d28-00002b7605b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2dea62-d57c-c8c8-6273-00005e6b1d68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb73a84c0c2684.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb73a84c0c2684.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b8bc53-93b8-bd6d-4914-000017460f38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d615a80d-4fa7-01cf-a096-0000f7ad0421","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb9cea2d96337e.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb9cea2d96337e.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2ad36a-209f-7668-9ef7-0000c0985409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d062cca7589.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d062cca7589.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363394c-a880-e85d-88a2-000057c98c31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7441f57b1a78.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7441f57b1a78.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa49ecc-a309-5d59-2a76-000052baea50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7eda661-f790-29b9-38a7-00009b8561f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7333cef1df5b.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7333cef1df5b.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07db468-da12-3dda-b9d3-00001cafb9fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb72c503457787.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb72c503457787.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb89484-73c2-4524-4b93-0000c2dd820c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb72c503457787.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb72c503457787.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd20b8-648b-1711-c746-00001f6f01b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/i","pattern":"[url:value = 'http://175.107.209.223:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f7387e-0cac-b193-97c7-00009e5fdbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d98c1e-2b56-6c51-533b-00008af77695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/i","pattern":"[url:value = 'http://218.29.28.21:33666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea00095-100a-20e9-e1f9-0000d9789c83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/i","pattern":"[url:value = 'http://222.139.69.87:33578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eab563e-1f4c-32f9-446b-000077660d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.32/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e378ad53-612f-7839-f7de-0000dffbee0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7441fd07-5440-c1fb-d40a-000051f0bda9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.37.245:40790/i","pattern":"[url:value = 'http://113.221.37.245:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9cb079-4e42-5f41-c585-0000b22a674a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==","pattern":"[url:value = 'https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb6d4a5-7f3f-ecbc-c18a-0000ec93cc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.10.7:39430/i","pattern":"[url:value = 'http://123.11.10.7:39430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55fef21-bf84-4bcd-032e-0000efcbcaca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.127:51731/i","pattern":"[url:value = 'http://115.57.233.127:51731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312341f3-57f4-e4a2-ecbc-000008f18720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/i","pattern":"[url:value = 'http://46.236.65.23:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1ca74f-6b47-4996-45c6-00007af7f9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/bin.sh","pattern":"[url:value = 'http://42.237.4.138:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb57556-70c0-0993-9cab-00007504ddf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/bin.sh","pattern":"[url:value = 'http://222.142.222.21:33146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd20d7b-c54c-4c93-1d6c-000071a10f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/i","pattern":"[url:value = 'http://182.113.202.0:42578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df95a2c3-cbd2-d56e-57ab-00007bcbd4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/i","pattern":"[url:value = 'http://83.219.1.198:51018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72eef1c4-ed41-ad87-ee95-000028c564c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/bin.sh","pattern":"[url:value = 'http://115.52.190.59:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ae7b9-d215-685a-eb58-00009f167db0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/i","pattern":"[url:value = 'http://203.2.151.15:42459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb4da69-29b9-b772-4565-000004abeffd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/bin.sh","pattern":"[url:value = 'http://120.28.194.92:40193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fcd0b9-d803-de79-2fbd-00000bcafb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/bin.sh","pattern":"[url:value = 'http://46.236.65.23:41753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddb539e-9585-9b90-59fe-0000836cd5a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/i","pattern":"[url:value = 'http://77.236.74.65:48279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4a83bd-e0f5-dfd7-7c13-0000bf574b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/i","pattern":"[url:value = 'http://222.138.114.112:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddb19ef-5d17-07a5-7b3a-0000dcc9703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.137.250.247:56159/bin.sh","pattern":"[url:value = 'http://38.137.250.247:56159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48de9e99-eca6-7e82-f3a4-0000881d9ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/i","pattern":"[url:value = 'http://42.87.221.249:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a9bade-9f2f-e568-86f9-0000c2410039","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/i","pattern":"[url:value = 'http://103.179.240.227:36804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649b3a2e-888f-30fb-7813-000084d1ba95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/i","pattern":"[url:value = 'http://103.80.57.126:60997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3c7a1e-2f16-a6c8-9e17-000018712693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/i","pattern":"[url:value = 'http://46.236.65.163:51558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72494f78-1e56-f83a-a5a8-0000d675d6ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/bin.sh","pattern":"[url:value = 'http://193.163.187.213:45749/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8406fe-f384-c072-80ee-0000f7a3fba5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.79.142:44907/i","pattern":"[url:value = 'http://42.226.79.142:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ff6878-5efb-0f57-257d-00002eb27280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/bin.sh","pattern":"[url:value = 'http://115.49.73.86:41886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f03266d-7395-70aa-db15-0000eeaecf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/bin.sh","pattern":"[url:value = 'http://222.185.199.96:32826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf04e17a-e709-eea4-8714-0000ed18ae23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/i","pattern":"[url:value = 'http://123.5.153.69:57210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446c759f-0ff6-e9f2-4464-000014751ae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/i","pattern":"[url:value = 'http://182.124.162.58:48222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--795c24eb-aded-f675-057d-0000c2f486ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/i","pattern":"[url:value = 'http://115.49.150.183:34026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9d06dc-c578-50a7-eba3-0000a801c1ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/i","pattern":"[url:value = 'http://61.53.205.176:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16de9fac-01d5-cc87-626f-0000b3a688ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/i","pattern":"[url:value = 'http://110.39.227.44:34974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b0ab10-f1c3-cceb-9fd9-00006ec230f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/i","pattern":"[url:value = 'http://39.73.126.17:41462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd17a434-bc57-2f40-01b7-00009eacf405","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/i","pattern":"[url:value = 'http://42.59.237.57:55244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a917743e-96ac-db3a-8c9c-00001203b4a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/i","pattern":"[url:value = 'http://42.59.235.112:57254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82744e02-5deb-b9d2-38c2-0000ce6046ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/bin.sh","pattern":"[url:value = 'http://222.138.114.112:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65537ac6-ef14-6931-4e25-000046e63e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.9.103:49699/i","pattern":"[url:value = 'http://221.15.9.103:49699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842ceb68-dfe0-9ad4-4bcb-00003de09976","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/i","pattern":"[url:value = 'http://61.52.14.231:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50122219-3313-a4d9-7406-0000b38aea69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/bin.sh","pattern":"[url:value = 'http://61.52.14.231:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fccc19-aef6-172d-2f26-000034c5fb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.228.213:50246/i","pattern":"[url:value = 'http://125.41.228.213:50246/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d232fe3f-43d6-a056-ac68-000099a97a62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.17.30:34226/i","pattern":"[url:value = 'http://115.194.17.30:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda53341-d0ef-d058-d2f9-0000d7f990b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/i","pattern":"[url:value = 'http://101.109.201.128:44332/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16455950-ea20-b41e-e3ec-0000f505380a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/i","pattern":"[url:value = 'http://193.163.187.213:45749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2239da29-ab3e-1211-8b57-0000e7389d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/bin.sh","pattern":"[url:value = 'http://83.219.1.198:51018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0edfe769-33b2-7640-b207-0000b4231f61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/bin.sh","pattern":"[url:value = 'http://125.42.65.22:32872/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88f1d8-f058-a81c-3313-00009928fa16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.240:49683/i","pattern":"[url:value = 'http://115.55.130.240:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba13dbaf-55a9-58f3-efcb-0000c0200243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/i","pattern":"[url:value = 'http://115.50.224.108:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4303eef3-82d6-0f19-ce2f-00001a0007bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/bin.sh","pattern":"[url:value = 'http://39.73.126.17:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2c9135-093c-667f-53e7-00008c54b5a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/bin.sh","pattern":"[url:value = 'http://77.236.74.65:48279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5638541-ee8d-2ec5-00c5-00001761fe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/i","pattern":"[url:value = 'http://115.58.88.232:50270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c216beb8-3912-8587-0fd2-0000b1a9dca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/bin.sh","pattern":"[url:value = 'http://113.221.8.44:56847/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ccd98a-9fa3-8fee-29db-0000dafc2bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/bin.sh","pattern":"[url:value = 'http://175.149.219.183:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--576b0b2b-5b18-c7f9-121c-0000f9fa8de3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/i","pattern":"[url:value = 'http://125.41.247.59:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a75001c-7ab2-f98b-2c0f-0000c1259a23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/i","pattern":"[url:value = 'http://124.131.128.79:53693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac0be52-4b65-187f-1791-00007a6cfe3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/i","pattern":"[url:value = 'http://27.37.229.199:49596/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed854d-4e6a-f5b2-5fc1-0000147ba914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/bin.sh","pattern":"[url:value = 'http://123.161.90.29:49111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d062cb40-c0b4-af14-814d-00000f5ec64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/bin.sh","pattern":"[url:value = 'http://27.215.84.16:59065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0650de63-a1eb-916a-c9d3-0000ca3789b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/i","pattern":"[url:value = 'http://42.85.169.225:40832/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2795474d-1f2d-54a6-7385-0000b369e513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/bin.sh","pattern":"[url:value = 'http://110.36.86.0:40490/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ded14ef-56cd-3469-10b5-0000a6dd9bfe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/bin.sh","pattern":"[url:value = 'http://110.39.227.44:34974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae20a592-c8bd-4c46-e124-0000e2ff41fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/bin.sh","pattern":"[url:value = 'http://103.179.240.227:36804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dff79ae-bf32-517f-c23a-0000f46f187b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/i","pattern":"[url:value = 'http://222.185.199.96:32826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081645bc-c4a5-0caa-18bf-000041e84cc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/i","pattern":"[url:value = 'http://115.55.130.218:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fe57a3-d1b6-9432-36fc-000080b7b28a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/bin.sh","pattern":"[url:value = 'http://115.50.224.108:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c9dfa5-c429-aaf1-7087-0000cfdd7968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/bin.sh","pattern":"[url:value = 'http://103.249.199.3:36611/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed72677-8189-7496-36c1-00007ea1ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/bin.sh","pattern":"[url:value = 'http://124.131.128.79:53693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73991ded-6785-e573-3227-000023f341d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/bin.sh","pattern":"[url:value = 'http://42.86.137.34:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa631fcc-cda6-e908-5630-00007522140c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/i","pattern":"[url:value = 'http://219.155.73.196:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73acf7e6-7961-c8c5-421b-0000dd847176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/Mozi.m","pattern":"[url:value = 'http://175.174.68.59:47203/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87264a75-02b3-17d7-22e3-00007ed7cde0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/bin.sh","pattern":"[url:value = 'http://103.80.57.126:60997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5858ab08-8af8-697b-5b64-0000d226a8aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/i","pattern":"[url:value = 'http://182.126.84.239:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531e81a8-f3ef-2acb-8411-0000fb8add4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/bin.sh","pattern":"[url:value = 'http://175.149.88.173:35767/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc6b441-5114-6cdd-4067-00007780ae7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.138:40709/i","pattern":"[url:value = 'http://182.114.192.138:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c26510-b124-8a1b-8712-000085b0da09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.94:60512/bin.sh","pattern":"[url:value = 'http://27.37.102.94:60512/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fda7ca4-e90a-724d-62cf-0000cf8bbd3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/i","pattern":"[url:value = 'http://27.37.102.10:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5d44ec-1490-4700-c81e-0000d541cb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/i","pattern":"[url:value = 'http://123.11.72.175:34884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152d3c-8166-7813-04c4-000094f0e7f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/bin.sh","pattern":"[url:value = 'http://123.11.72.175:34884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8625d079-bf22-e865-32fa-0000656a07af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/i","pattern":"[url:value = 'http://222.137.152.55:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d5f12-1293-b2bf-ab29-0000e5f46e1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/i","pattern":"[url:value = 'http://202.107.0.250:55295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9ca26d-1075-8a5b-b6f6-0000d1f11ca6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/bin.sh","pattern":"[url:value = 'http://27.37.102.10:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fe4c21-a50c-49a0-bc1b-0000cb30b62d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/bin.sh","pattern":"[url:value = 'http://125.41.247.59:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad5d646-4df3-7a47-6b8d-0000a1baf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/bin.sh","pattern":"[url:value = 'http://203.2.151.15:42459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf52c1e-65da-2f59-014c-00001628a604","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.80.162:54439/i","pattern":"[url:value = 'http://110.36.80.162:54439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4147f6-08ad-23dd-a1b4-0000fbdce224","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/bin.sh","pattern":"[url:value = 'http://182.126.84.239:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502afb46-b9be-e0dd-aec6-0000ac92452c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.134.160.73:39191/i","pattern":"[url:value = 'http://183.134.160.73:39191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e56d3b-205e-56e7-8d0d-0000dc7b4cf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/i","pattern":"[url:value = 'http://219.155.171.135:36711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6052e51-77f9-6fd3-c1ba-0000e265fc3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/bin.sh","pattern":"[url:value = 'http://219.155.171.135:36711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a723511-0f05-8990-722d-0000f5a85ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/bin.sh","pattern":"[url:value = 'http://175.174.41.135:59524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31410a70-cba4-fe01-4e45-00005bb3b443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/bin.sh","pattern":"[url:value = 'http://182.121.83.219:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74ed1eb-53b7-5daf-5882-00005886e2f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/i","pattern":"[url:value = 'http://163.182.97.242:4040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c926b64-d821-a2c0-2458-000023a0662a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.113.196.55:38024/i","pattern":"[url:value = 'http://222.113.196.55:38024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c42fd0-fa2a-58c2-a155-0000f7ea4efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/i","pattern":"[url:value = 'http://103.249.199.3:36611/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b134db11-a6c8-332d-e61d-0000aaea6439","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/i","pattern":"[url:value = 'http://115.49.73.86:41886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37727a46-e60d-7eca-b959-0000ebba3587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/i","pattern":"[url:value = 'http://175.9.165.81:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e307e147-ca56-7a36-005f-000058a28906","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/bin.sh","pattern":"[url:value = 'http://163.182.97.242:4040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b3683b-3511-6e6d-534e-000023044c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/i","pattern":"[url:value = 'http://123.161.90.29:49111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d5cb7c-3936-d0c1-9fd7-0000772afcc6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/bin.sh","pattern":"[url:value = 'http://175.9.165.81:50484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0eedcc3-d538-dfc0-c51a-00000da0283b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/bin.sh","pattern":"[url:value = 'http://222.141.21.106:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1167be-63c5-902c-49c0-00007bba4b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/bin.sh","pattern":"[url:value = 'http://115.52.194.55:43061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90edea43-e142-cb0d-48c8-0000fc80f304","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.200.77:49632/i","pattern":"[url:value = 'http://42.227.200.77:49632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0335d17-9437-773b-7f81-00005ddab2f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.124:33142/bin.sh","pattern":"[url:value = 'http://59.96.142.124:33142/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0830bdb6-d5c4-3a9b-ec80-00004217275d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/bin.sh","pattern":"[url:value = 'http://182.121.244.13:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993f738f-2bd0-c653-604f-0000ac6b1e82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/i","pattern":"[url:value = 'http://175.149.88.173:35767/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175fba86-8dc4-d734-e6da-0000f43028dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/bin.sh","pattern":"[url:value = 'http://222.137.152.55:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d508a8e4-8a9f-8186-cea1-0000329883d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/i","pattern":"[url:value = 'http://182.121.83.219:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a834a6-fcde-3b0e-cf5d-00004aa4bcf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/bin.sh","pattern":"[url:value = 'http://42.87.221.249:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aba516b-baef-8153-1d78-000038e057e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/bin.sh","pattern":"[url:value = 'http://182.240.11.199:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e856ab28-32e2-eda1-9103-00000dd3c3fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/bin.sh","pattern":"[url:value = 'http://61.53.205.176:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5987ab48-7300-6a1a-94af-0000b4d0ea2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/bin.sh","pattern":"[url:value = 'http://124.235.207.2:39666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4353af-24fe-9b4a-aae2-0000581141d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/bin.sh","pattern":"[url:value = 'http://101.109.201.128:44332/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4697066-26db-a308-08b6-0000a37d5282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/bin.sh","pattern":"[url:value = 'http://42.85.169.225:40832/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d817f27-7347-b391-5c3b-0000fb6cc379","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/bin.sh","pattern":"[url:value = 'http://203.177.28.149:50084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f788a748-e186-03dd-67b9-000088dab81d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/i","pattern":"[url:value = 'http://175.174.41.135:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e3e8a2-c8d1-947d-ccb5-0000812e06af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.113.189.94:60395/i","pattern":"[url:value = 'http://125.113.189.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d99e1ab-48f1-d858-a14c-0000efed1e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/bin.sh","pattern":"[url:value = 'http://115.49.150.183:34026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1113298-2b0d-a275-b11c-000080b6d894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/i","pattern":"[url:value = 'http://203.177.28.149:50084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd91e9f-3eeb-bd1f-ee00-00002977ef20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/bin.sh","pattern":"[url:value = 'http://202.107.0.250:55295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3ce763-05c1-e872-6abb-000080b72925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/bin.sh","pattern":"[url:value = 'http://42.179.125.40:42620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef82e744-3d24-2188-58fb-0000916ce77a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/i","pattern":"[url:value = 'http://182.117.68.176:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e971829-4bbc-5adf-d753-00002f9aa651","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.252.55:54907/i","pattern":"[url:value = 'http://112.248.252.55:54907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa27b96-6b56-f79e-45db-0000f9fbe33f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.218.29:55917/i","pattern":"[url:value = 'http://61.53.218.29:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a20d802-e707-7dd6-7cdb-0000857dfe85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/bin.sh","pattern":"[url:value = 'http://123.14.57.190:46376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a43f114-0f57-af3f-6d9b-00000d2b8eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/i","pattern":"[url:value = 'http://123.14.57.190:46376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d8cd0c-a092-ae91-a8a9-00000b304f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/bin.sh","pattern":"[url:value = 'http://115.55.10.187:42654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae02b62-c0eb-a068-827a-0000695f452b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/i","pattern":"[url:value = 'http://27.215.84.16:59065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf9624d-fc89-076e-de6b-00001f9e18ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/bin.sh","pattern":"[url:value = 'http://182.124.162.58:48222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b804c6-fb24-4d53-cfcd-0000c0825196","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87529139-37a4-3db0-827b-000032f310b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/i","pattern":"[url:value = 'http://113.228.208.46:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d931bca-c800-f0f1-5d60-0000a87e5f31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/bin.sh","pattern":"[url:value = 'http://222.137.19.202:54735/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97defab5-35e8-b64f-0379-0000b8db8f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/GpzbWsi.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/GpzbWsi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd298f9-dcb4-ec76-9817-00009f26be10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/1.sh","pattern":"[url:value = 'http://198.144.179.82/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83683f6-0df8-83da-003d-00009a2b1415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/i","pattern":"[url:value = 'http://42.230.30.16:36416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5c8747-23df-fdf8-28c9-000097bccd86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/i","pattern":"[url:value = 'http://115.48.146.252:57987/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df510a4-4703-3708-7161-0000ad12a4ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/bin.sh","pattern":"[url:value = 'http://182.124.9.99:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a038d869-e9d8-a698-f55c-0000d2934228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/bin.sh","pattern":"[url:value = 'http://39.90.149.223:46931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fefd960-6ecf-b5b0-fd2e-0000dcee0f0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/i","pattern":"[url:value = 'http://61.53.202.74:59244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba346a1-7f49-fdda-2c6f-0000c53068c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f84d3e4-e751-b9a3-e70f-00001a5dec08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe","pattern":"[url:value = 'https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e573551-993e-87b5-5865-0000ce3607c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv7l","pattern":"[url:value = 'http://31.77.227.119/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3524d0-975f-4a57-0610-0000dea455c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/cat.sh","pattern":"[url:value = 'http://31.77.227.119/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b279dfca-523a-b089-57b4-0000473746c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85efcd91-9c3f-29f7-5973-00004646c106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.arm7","pattern":"[url:value = 'http://31.77.227.115/meower.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ccc87-2575-7ca3-396d-00008efa0fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/Services.apk","pattern":"[url:value = 'http://31.77.227.115/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e691f713-27bc-db5a-796f-000036e38cc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.so","pattern":"[url:value = 'http://31.77.227.115/meower.so']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffeedd9-d702-8ff7-b39d-0000c7fb1984","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b059bf4f-35ac-779b-ce48-0000fe5ad4c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6349de11-9279-4391-4bf6-0000f9299d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.248/sysorbit.apk","pattern":"[url:value = 'http://176.65.139.248/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1f63e7-2526-6be2-fe12-00009b03b606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.rxx.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.rxx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fad144-7e6e-3c89-f0e1-000046ae8fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.214:53741/Mozi.m","pattern":"[url:value = 'http://59.96.138.214:53741/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834a920d-49ff-c320-5a89-000029d09668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/deploy.sh","pattern":"[url:value = 'http://43.228.157.73/deploy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f71a162-ceb5-08a3-14ea-00002f3b969d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/gg11","pattern":"[url:value = 'http://191.44.112.89:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3250fd-8843-b262-44ef-00003b06a9c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/i","pattern":"[url:value = 'http://39.90.149.223:46931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8d174e-9326-56e1-5b01-000018f89e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/bin.sh","pattern":"[url:value = 'http://125.44.196.40:38436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646eeae3-4c0d-b195-d8a8-000051497c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/bin.sh","pattern":"[url:value = 'http://220.192.252.142:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bef10-9bb5-6c46-c1da-0000ebd6b12a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/i","pattern":"[url:value = 'http://27.194.27.62:59829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248efb6e-9680-6732-7904-00004b7735f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/bin.sh","pattern":"[url:value = 'http://42.239.150.62:42943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8372b00b-7a50-647b-20d8-0000a2ed1464","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.185:50547/i","pattern":"[url:value = 'http://115.48.149.185:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05472eb3-4750-52e5-d6d0-0000d0d1d8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://89.189.181.54:47685/i","pattern":"[url:value = 'http://89.189.181.54:47685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f353f0fd-5c11-5def-c82a-0000afb4442d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/i","pattern":"[url:value = 'http://123.4.203.194:35564/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c051c2ed-d6b4-ebe3-0d1c-0000b0ecd233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/bin.sh","pattern":"[url:value = 'http://112.239.102.100:56270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87505a8e-be50-8120-bdcf-000034e29789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/i","pattern":"[url:value = 'http://42.239.150.62:42943/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e03a0d-157b-6dd2-ac88-0000790dea2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/i","pattern":"[url:value = 'http://112.239.102.100:56270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2900b718-8889-9a46-fe89-00004dc78f30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/bin.sh","pattern":"[url:value = 'http://182.113.202.0:42578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eaca7a-b92c-a17a-d82c-0000dcda9c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.202.62:60041/i","pattern":"[url:value = 'http://105.186.202.62:60041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcdbeb96-4d97-7133-1079-0000a163a06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://funneldiy.com/Installer_c2cea6.msi","pattern":"[url:value = 'https://funneldiy.com/Installer_c2cea6.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1e570a-76c4-3af1-6ba9-0000f6143602","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/bin.sh","pattern":"[url:value = 'http://182.123.211.251:59971/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a5429-730f-2848-aa2d-000096831839","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.67:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddd5de4-85ed-291a-283d-0000adeab0af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/i","pattern":"[url:value = 'http://182.117.10.67:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f070a126-7713-ba3b-2cf8-00002faf8398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/i","pattern":"[url:value = 'http://125.44.196.40:38436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfef20e8-9633-c16e-040d-0000f6b61f22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/i","pattern":"[url:value = 'http://182.123.211.251:59971/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bd64e9-6a25-7fcb-46cf-0000e604cf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/i","pattern":"[url:value = 'http://120.28.194.92:40193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1a9da2-a04b-86dc-cace-00001707c1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/bin.sh","pattern":"[url:value = 'http://182.117.68.176:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cf2e57-760c-485d-72cd-00009d59ab12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Jz4KcAs.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Jz4KcAs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcb351-5f4c-b6d4-3303-0000e2eb42be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/bin.sh","pattern":"[url:value = 'http://125.43.23.92:55029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f926b-14e2-c8e5-d054-00007e8b84ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm5","pattern":"[url:value = 'http://94.154.43.146/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaf0cca-d6a5-7d1f-9bc4-00008292a753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/x86_64","pattern":"[url:value = 'http://94.154.43.146/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bb2f32-821c-05d9-d162-00009d362658","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mpsl","pattern":"[url:value = 'http://94.154.43.146/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d469e9fb-744b-e10b-1363-0000f6354812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mips","pattern":"[url:value = 'http://94.154.43.146/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7716c3d1-7c02-0ac3-b52e-00006c3e2b02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm6","pattern":"[url:value = 'http://94.154.43.146/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--374b1b01-19dd-52ab-a731-0000bd8c7c2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.m68k","pattern":"[url:value = 'http://94.154.43.237/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfc7abf-648d-5fb5-a0bd-00005bafd335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.arc","pattern":"[url:value = 'http://94.154.43.237/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060ec39d-a5e6-1bfb-c9d5-000006d2c781","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv5l","pattern":"[url:value = 'http://94.154.43.237/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9918a2fd-76da-22b9-f2c0-0000c637e389","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm4","pattern":"[url:value = 'http://94.154.43.146/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0011f347-12d4-e6a6-674c-0000d4824c67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm7","pattern":"[url:value = 'http://94.154.43.146/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b672fd7-8603-14d6-d3e7-0000bd7aaaf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mips","pattern":"[url:value = 'http://94.154.43.237/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d23905e-1d80-37a9-4db5-00004172bd51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv6l","pattern":"[url:value = 'http://94.154.43.237/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae777571-2fb1-23b5-ca90-00003d6c2e4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.i486","pattern":"[url:value = 'http://94.154.43.237/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dbe0920-99f7-2293-9b52-000031202681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.powerpc","pattern":"[url:value = 'http://94.154.43.237/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ffb588-d07e-1988-14f9-0000afe0ba9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsel","pattern":"[url:value = 'http://94.154.43.237/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca56bde1-555d-eb12-65e1-00008f35dbc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/a.sh","pattern":"[url:value = 'http://94.154.43.237/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77c332d-ed2c-6e1b-4383-0000693bc89d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sh4","pattern":"[url:value = 'http://94.154.43.237/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f15f2dc-d1ce-9682-721e-00003bb2ee31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv4l","pattern":"[url:value = 'http://94.154.43.237/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3438a11f-9a50-3641-07cc-00007c1294e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv7l","pattern":"[url:value = 'http://94.154.43.237/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5599afef-b52a-faa4-c76e-0000f68459a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.x86_64","pattern":"[url:value = 'http://94.154.43.237/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84b36c7-ce28-a1f5-a3eb-00000884ccee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sparc","pattern":"[url:value = 'http://94.154.43.237/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06aabe2-a354-d29f-9c92-0000be84acc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm6","pattern":"[url:value = 'http://94.154.43.175/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72d2e6c-f802-d392-85a4-0000fb632244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.237/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5963fa58-8d4c-77d4-63ea-0000ac31032a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm5","pattern":"[url:value = 'http://94.154.43.175/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c74701-1d1c-99c8-6a46-00004f8ca19e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mpsl","pattern":"[url:value = 'http://94.154.43.175/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631581c8-267f-7c42-500a-0000248fcfd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mips","pattern":"[url:value = 'http://94.154.43.175/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b9aa9-bebe-b9a3-2390-00007311f9a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm7","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0381ab32-5b6e-ae82-ca0d-000004d5a2c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c146dc-d880-61eb-0bb4-00003aa5939c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mpsl","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6591c3e-853e-4a35-c158-00002e4339df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fb4c3-a4a5-b6ce-c80b-000051502b0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.m68k","pattern":"[url:value = 'http://94.154.43.10/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76d9b74-7574-892e-e39d-00000638cba1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm7","pattern":"[url:value = 'http://94.154.43.175/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb9cfa7-9bff-3b36-44d4-0000d69ece5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.sh4","pattern":"[url:value = 'http://94.154.43.10/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0870edd-e86e-a280-1e8d-00009c78d860","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.i686","pattern":"[url:value = 'http://94.154.43.10/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76138015-e90c-6327-bba7-000051a6fdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mips","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ad93a9-93a4-f73c-5674-0000d0d42504","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.spc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65fb85-80f2-d3d0-5270-0000d9183128","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm5","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--783f810e-13c8-564f-316f-00006a16eceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz.sh","pattern":"[url:value = 'http://94.154.43.10/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4398635-7eaa-b41c-d0aa-0000e40ad5f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a56bb-1705-09cd-75bb-00002cfe57b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/debug","pattern":"[url:value = 'http://94.154.43.10/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb2df0-0297-66ae-6f36-0000564057aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.ppc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56caa3f-223e-46c9-c746-0000cbad9ec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm6","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3ca92e-3df7-503d-582a-0000960f5589","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86_64","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ae4408-82f8-fec8-81dc-00005f1e10ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i586","pattern":"[url:value = 'http://94.154.43.84/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabce564-178e-e560-015a-00005a76deb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mipsel","pattern":"[url:value = 'http://94.154.43.84/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d56a230-91a8-aeb5-53f3-0000ce248a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv4l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7daff03-82f0-7028-298d-000003123d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.x86_64","pattern":"[url:value = 'http://94.154.43.84/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1178d9-a3fe-5af2-38a6-0000fb789871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.sh4","pattern":"[url:value = 'http://94.154.43.84/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e8fa51-123b-3aa8-c765-0000d98a6243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i686","pattern":"[url:value = 'http://94.154.43.84/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944d9371-ccf4-ac00-b705-0000f344a3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv5l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a490e423-ab8a-728e-2d5b-00000460181f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.powerpc","pattern":"[url:value = 'http://94.154.43.84/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf60c0b2-1c05-1b47-a259-0000b4e4d979","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv6l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50404f-a7ab-fdc0-3edd-000014a2912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.m68k","pattern":"[url:value = 'http://94.154.43.84/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17c7499-5470-4935-d1c6-0000145447f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mips","pattern":"[url:value = 'http://94.154.43.84/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67bf1f3-90fd-4837-7938-00008984f0c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv7l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7112846-286a-ffe4-5522-0000b78c3a43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/w.sh","pattern":"[url:value = 'http://94.154.43.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d6026-122f-7c8d-2748-000083ff19a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm","pattern":"[url:value = 'http://94.154.43.122/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d16124e-8461-a0e6-e4e8-00000252208b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86_64","pattern":"[url:value = 'http://94.154.43.122/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb7a8a3-2871-d7e0-b0d7-00001c93b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mips","pattern":"[url:value = 'http://94.154.43.122/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c1d333-348a-e4ee-e455-0000942d7acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm5","pattern":"[url:value = 'http://94.154.43.122/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40700829-7381-ee4d-adaf-00005b36c3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mipsel","pattern":"[url:value = 'http://94.154.43.122/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75158bd-3744-8511-0a8a-000057fe9e64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/spc","pattern":"[url:value = 'http://94.154.43.122/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cfb21f-26b5-2186-62c3-00003e24b240","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm7","pattern":"[url:value = 'http://94.154.43.122/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209b9c75-9775-2770-fdd5-00001c6560ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/m68k","pattern":"[url:value = 'http://94.154.43.122/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc88289-6207-e77b-c7a1-00008698d525","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm6","pattern":"[url:value = 'http://94.154.43.122/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a5d72a-06bb-542e-bfa0-0000a96982bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86","pattern":"[url:value = 'http://94.154.43.122/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c04504b3-cb5a-e9a9-10ff-000051b4753c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/sh4","pattern":"[url:value = 'http://94.154.43.122/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b517e6e4-de4b-1534-5857-0000d16aecca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/ppc","pattern":"[url:value = 'http://94.154.43.122/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3228aa6a-7b77-25fa-ee0e-0000d06bf7f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/bin.sh","pattern":"[url:value = 'http://182.112.13.24:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57895b2b-59b9-fa05-c2ad-00000d4553e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/i","pattern":"[url:value = 'http://110.36.86.0:40490/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f5b5f5-29ae-af0f-02e0-0000131ca803","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/bin.sh","pattern":"[url:value = 'http://175.149.135.190:37738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54fbf35-2c0c-04f4-e984-000053e88c66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/bin.sh","pattern":"[url:value = 'http://110.39.224.167:59812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8f53aa-cbec-d411-d895-0000cc080dc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.152.223.228/svc.exe","pattern":"[url:value = 'http://93.152.223.228/svc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9056a341-8e40-3a97-2371-0000820cb922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c9e3b-1f48-2224-3407-0000778ec568","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/0NOjfFC.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/0NOjfFC.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be565f17-1f1f-7ac6-ad83-0000523445bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/i","pattern":"[url:value = 'http://110.39.224.167:59812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46dc40-9384-686b-e050-000036dea627","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/bin.sh","pattern":"[url:value = 'http://218.13.149.41:37814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc33122d-b4cc-7f81-706a-000003c78104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/PithnoModule.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/PithnoModule.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9494cd51-c7a7-78c2-58a6-0000103effe3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/i","pattern":"[url:value = 'http://175.149.135.190:37738/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31b0cb5-c84a-41db-acd0-00001133ff06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/i","pattern":"[url:value = 'http://125.43.23.92:55029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55342b4-decf-1f47-fff7-0000060c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/i","pattern":"[url:value = 'http://218.13.149.41:37814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8015d086-ca17-bb77-8c14-0000fd2b03e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/i","pattern":"[url:value = 'http://123.8.160.185:35924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0a3f1c-6f20-6d3f-4cf0-00005941dc37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/bin.sh","pattern":"[url:value = 'http://123.8.160.185:35924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c67792-ae43-48e8-b6c9-00001898a143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Cgt6XB8.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Cgt6XB8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ca2a05-d59f-ec09-3188-0000e6676056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/bin.sh","pattern":"[url:value = 'http://210.208.111.234:45761/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a7f47-386c-7cc9-6cdb-0000d46642e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/bin.sh","pattern":"[url:value = 'http://115.58.88.232:50270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7060eee2-b55e-aab5-8053-0000d35ffe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/i","pattern":"[url:value = 'http://210.208.111.234:45761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee8d096-5f80-a521-78dd-000022012e77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.34:44324/i","pattern":"[url:value = 'http://59.97.252.34:44324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a94e8d-df65-a749-6fc0-0000dc6bb4c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/bin.sh","pattern":"[url:value = 'http://27.194.27.62:59829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a4681d-b17a-0674-1ef2-00009c17f341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/i","pattern":"[url:value = 'http://113.239.81.215:38553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd872b4b-148c-eedf-5926-00008d15ccb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/bin.sh","pattern":"[url:value = 'http://175.151.64.247:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e48520-5758-6822-4897-00002da84925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/debug.dbg","pattern":"[url:value = 'http://198.144.179.82/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63481e06-a9ec-030c-00d4-00005cbdcf02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86","pattern":"[url:value = 'http://198.144.179.82/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e25219-38ed-635d-f5cb-0000210861b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm5","pattern":"[url:value = 'http://198.144.179.82/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdeb03a3-74b9-e389-6630-000033bdce59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm6","pattern":"[url:value = 'http://198.144.179.82/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c25ff3-6c5b-dda3-18c5-00000bbd6ab8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86_64","pattern":"[url:value = 'http://198.144.179.82/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbc9191-e5b7-426f-8f72-0000a22ad3d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/spc","pattern":"[url:value = 'http://198.144.179.82/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba8cd9f-a614-4cd5-4e30-0000a4603881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/sh4","pattern":"[url:value = 'http://198.144.179.82/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efa2fc8-67a0-6eb9-1a8f-000024bea177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/ppc","pattern":"[url:value = 'http://198.144.179.82/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aec3335-12c1-bc42-aa76-00008b01a93c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm7","pattern":"[url:value = 'http://198.144.179.82/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8690a90a-fdef-b0a4-89bd-0000762b541a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm","pattern":"[url:value = 'http://198.144.179.82/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb46ef40-6645-0a15-b536-0000c2b5c303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mpsl","pattern":"[url:value = 'http://198.144.179.82/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e942989-3943-d23a-efdf-0000a9b6ad49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mips","pattern":"[url:value = 'http://198.144.179.82/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc940269-cfda-536e-bf93-000076248062","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm64","pattern":"[url:value = 'http://198.144.179.82/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b81d5f-a001-295e-f868-0000a9407b93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/m68k","pattern":"[url:value = 'http://198.144.179.82/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542b6310-0795-2ea6-8e12-00000a3c27ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8894093030/v8eACE4.exe","pattern":"[url:value = 'http://62.60.226.140/files/8894093030/v8eACE4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23c69a9-3134-cc29-2053-0000b98f8fea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/bin.sh","pattern":"[url:value = 'http://42.239.224.11:42582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4c4c8c-6507-81b4-3638-00003fffaa64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.181.102.189:53344/bin.sh","pattern":"[url:value = 'http://103.181.102.189:53344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da85dcd7-2939-62f2-88fd-0000ccef9b7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/bin.sh","pattern":"[url:value = 'http://36.48.114.30:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--085b09e9-6681-2d26-d37a-00007f3e9dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/i","pattern":"[url:value = 'http://95.56.232.109:58750/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f15d40-48f4-3fbf-2906-00004143292d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/i","pattern":"[url:value = 'http://42.239.224.11:42582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13f9abb-2e6d-f514-e425-000000b51b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/bin.sh","pattern":"[url:value = 'http://123.4.203.194:35564/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11722625-3582-9cd7-f04e-0000b7255280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/i","pattern":"[url:value = 'http://60.177.244.198:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b4132c-1f6d-2312-3db3-000068c2cc25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/i","pattern":"[url:value = 'http://36.48.114.30:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f6836d-78a3-b88b-5211-0000f0098138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/bin.sh","pattern":"[url:value = 'http://182.123.143.22:37354/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f661f74-3ade-210d-ccab-0000ce054fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.175.206:55714/i","pattern":"[url:value = 'http://123.5.175.206:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac31421-bbae-bcfb-62b3-0000e13a2dec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/bin.sh","pattern":"[url:value = 'http://101.108.253.192:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb1bac4-91dc-fc09-5689-0000c09cbe35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.121.27:53153/i","pattern":"[url:value = 'http://105.184.121.27:53153/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55504c9-cffb-763a-a017-0000156588bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/i","pattern":"[url:value = 'http://182.123.143.22:37354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e895c9-1fdb-b100-fc7d-0000c8effc45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5e7528-a420-fdea-d8d4-00001cb3a388","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.215:48371/i","pattern":"[url:value = 'http://120.84.214.215:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b54640-5489-0f65-56ac-000099c467c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--195b7023-4bd5-9d34-7707-00001dfb4c84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2757082e-1951-b798-f057-0000fb73603c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4b01d4-97b7-1ffd-e4af-000086e37184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977259ec-c206-5dde-7016-000081fc9af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526e7ed4-828f-d411-ff34-00006540c037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4819d81-1ed2-c99f-3fd5-00004ad1733c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af64e53e-e61d-bdfe-b375-0000b3552f73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49115d1b-5f4d-06c0-62d7-000081a00a9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66cce6-ecac-5060-4a93-00009a87b5ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787361b4-896b-aac9-28e8-000083cb697a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4dd394-2a0f-73f3-220b-0000ac14fe2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dfb7fa-f670-1cee-1dad-0000f1cd4497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c9b1cc-eb77-a3fe-78ed-000073a5cf83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55e2ed2-a308-f376-e8f7-0000fdafd1fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c575944-f983-6144-962f-00001d934264","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81102e18-e248-4116-39e6-0000f0f3aeaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede5def3-c043-9d05-2860-00008c2f76ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8faefa5f-129e-9454-4280-00004cabab74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1aa30e-f22a-022c-147f-000086a07eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da5da0a-94aa-2d02-dd03-0000248abaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5bd289-148d-0281-f1a6-000055254aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90893f94-9e61-72b8-7c89-0000c2d644aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.41.127:41358/i","pattern":"[url:value = 'http://182.113.41.127:41358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14655332-a620-2bd8-089e-00007fd7ef04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/i","pattern":"[url:value = 'http://120.28.194.30:35812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cad90b-fd18-db20-40fa-0000d368ffe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/i","pattern":"[url:value = 'http://101.108.253.192:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666a9b1a-5ae8-987f-88a7-0000da15b8f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/bin.sh","pattern":"[url:value = 'http://95.56.232.109:58750/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea00cf2-39dd-087d-51c3-000038550e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.132.10:54132/bin.sh","pattern":"[url:value = 'http://59.180.132.10:54132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2492082-85be-9c10-61b3-00008c435724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/bin.sh","pattern":"[url:value = 'http://42.226.69.203:60026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2ca642-252f-3a1d-aa8e-00004ded6b52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/i","pattern":"[url:value = 'http://42.226.69.203:60026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf3a4c10-5104-de86-fd45-000072903fda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47839/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9676def9-d335-c669-3e0e-0000e8be31ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/bin.sh","pattern":"[url:value = 'http://123.14.127.32:60165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf370f8f-a8ca-8093-ea8e-0000213aa06c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/i","pattern":"[url:value = 'http://196.190.133.180:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65c4373-a1ed-112e-cce6-00001b489258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.153.109:41774/i","pattern":"[url:value = 'http://61.53.153.109:41774/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90cd38b-3609-a88a-6d5b-0000bab56be1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d10b325-e2ee-d00d-ac25-000018af2c87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.64.43:42442/bin.sh","pattern":"[url:value = 'http://114.227.64.43:42442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c99b8d-fdea-a14c-a078-00006d96e47b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.162.6:59734/i","pattern":"[url:value = 'http://42.234.162.6:59734/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a57ea5b-eeb2-772d-33d8-0000c5015ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/i","pattern":"[url:value = 'http://123.14.127.32:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f63feff-001b-12e0-6f4b-0000146a8dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/bin.sh","pattern":"[url:value = 'http://123.5.153.69:57210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ae888a-5d9b-02ac-eb75-0000dae047a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.64:48265/i","pattern":"[url:value = 'http://182.116.113.64:48265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeaec7d-e646-2718-6615-00001a4b09c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/i","pattern":"[url:value = 'http://42.224.194.129:53622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b347684-1db6-63b8-ae31-00004a9bdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/bin.sh","pattern":"[url:value = 'http://42.231.187.33:46290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce75ef8-f020-9d7a-e07d-000055f760cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.236.135.234:57543/bin.sh","pattern":"[url:value = 'http://113.236.135.234:57543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144f868-fd47-f247-cc44-00001f66319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.184:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850749f-3a98-a59f-cfab-00002201579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/i","pattern":"[url:value = 'http://182.117.78.184:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c730de6-9661-ddbb-dc22-000025bbb70b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/i","pattern":"[url:value = 'http://110.38.210.180:57109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d7e29b-51a9-a5da-ddfe-000071cfc4c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/bin.sh","pattern":"[url:value = 'http://221.225.253.118:42553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7bdc42-52f4-3ddb-a040-00006d323e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/bin.sh","pattern":"[url:value = 'http://119.166.79.188:45758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f0c221-4ae3-80a0-1249-000089882e6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/i","pattern":"[url:value = 'http://119.166.79.188:45758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10402521-4f15-5db6-ae1c-000053d6f81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/bin.sh","pattern":"[url:value = 'http://42.224.67.38:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1c3bc9-237c-9dc9-0943-000042bb5bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.135.234:57543/i","pattern":"[url:value = 'http://113.236.135.234:57543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f205f4-c852-f7a1-305e-0000687ff973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/i","pattern":"[url:value = 'http://221.225.253.118:42553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102cb44-c02b-83b8-4356-000045e50f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.211.139:46635/i","pattern":"[url:value = 'http://110.38.211.139:46635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac886b4-d807-19a9-81d3-0000ce476607","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/i","pattern":"[url:value = 'http://42.231.187.33:46290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e828d0-9c6b-2124-63d2-00008a73b40e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/bin.sh","pattern":"[url:value = 'http://123.9.41.95:38149/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac2dcc6-01fb-8a81-8637-000039b38669","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/i","pattern":"[url:value = 'http://42.224.67.38:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b38a1f-b995-92d2-b4f6-000070083334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/bin.sh","pattern":"[url:value = 'http://110.36.77.162:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff00e482-337d-de0c-3f58-00002cd5bc57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.9.97:44103/i","pattern":"[url:value = 'http://115.55.9.97:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a2fbe9-2d72-cae3-2854-00009dd55456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i486","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4b2ccb-5c64-bad3-a451-0000b1b3cf25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/wget.sh","pattern":"[url:value = 'http://91.92.47.97/bins/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6613c5ca-a4d6-ba4b-6b81-00005a7d348b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1341279d-df56-a220-24af-0000daa3ad7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.sh4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05606786-4110-4da3-71ee-000076c0bea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mpsl","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e601ca0f-8ea3-3a43-42aa-0000b9380d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86_64","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd8b65-3b6e-f04c-daeb-000087c8b3fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm6","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b2a14f-d86c-52a7-1d6b-00001dc3d0eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mips","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64557b93-5ad2-dae2-3617-0000dce94625","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.spc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c16e0f-0388-270e-77c2-0000e837b6d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac4dadf-456f-1eb0-976c-0000957d1c15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm5","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdb2620-0161-4d93-4fce-00001ee48bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc440","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646091de-e8fe-7765-ad9e-0000568987f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i586","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f475a662-2d1a-e31b-5f91-00006717c4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm8","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc3ea49-56b6-f629-41b3-00002dc17b70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e9599-25f3-8ab3-21e0-00001d350631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.m68k","pattern":"[url:value = 'http://91.92.47.97/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cabbf3-1dcb-b477-c383-00003f74d49e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm7","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba1f404-1350-0805-15cb-0000227e5afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c9c8d3-8120-e309-6fae-00009a22e991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/i","pattern":"[url:value = 'http://210.208.110.172:59900/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c31e37-8d02-e0e1-1799-0000037e1af8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/bin.sh","pattern":"[url:value = 'http://60.184.149.85:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137e1cb8-6684-8d82-b3a1-00006ef1eb73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/i","pattern":"[url:value = 'http://115.54.117.199:59554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5abd48-5d31-19e4-b534-0000502af173","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/bin.sh","pattern":"[url:value = 'http://222.141.13.126:32997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2b1257-120b-c88e-813c-000049cdf4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/bin.sh","pattern":"[url:value = 'http://115.58.143.1:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48994f0e-6df7-c588-4f1d-000000da10c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/i","pattern":"[url:value = 'http://110.36.77.162:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8884cb-ecc7-9d2d-a635-0000d5006a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/i","pattern":"[url:value = 'http://60.184.149.85:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1c479e-c026-9486-fbb8-0000a8c255d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.248.169:58267/i","pattern":"[url:value = 'http://110.39.248.169:58267/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9bf6e1-f5ef-51e2-377c-0000796df3a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/523965","pattern":"[url:value = 'http://5.182.210.174/523965']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ec1ebb-8cca-facd-5a76-00004080c5a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/694268","pattern":"[url:value = 'http://5.182.210.174/694268']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d367acdf-c6e3-bdd4-f5be-0000a3c7306e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/46c7b2","pattern":"[url:value = 'http://5.182.210.174/46c7b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b5c9ef-8503-1056-d105-0000f7fbf92e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9846b5","pattern":"[url:value = 'http://5.182.210.174/9846b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063c568c-633e-9ca2-3be4-0000dfd72119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7836d7","pattern":"[url:value = 'http://5.182.210.174/7836d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1a268f-c633-6e70-77ee-000020a36333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00df69","pattern":"[url:value = 'http://5.182.210.174/00df69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc28539-75d1-f28d-dd34-0000ec525418","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e5a00","pattern":"[url:value = 'http://5.182.210.174/8e5a00']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67666c3-6c9b-55ac-d4d3-0000ed5e7529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/796fc4","pattern":"[url:value = 'http://5.182.210.174/796fc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5770dea-8bd5-f731-9be5-00002bcc8adf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a8ac25","pattern":"[url:value = 'http://5.182.210.174/a8ac25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b5757e-e733-5435-b08a-0000435acaf0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5969e9","pattern":"[url:value = 'http://5.182.210.174/5969e9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa0cd8-f576-102f-5b54-0000ed5a24a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1a029e","pattern":"[url:value = 'http://5.182.210.174/1a029e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bae0e34-9ae9-6a7d-8971-000078f9abc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6b8b4d","pattern":"[url:value = 'http://5.182.210.174/6b8b4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e6cf18-e574-7dbb-fb74-0000e3483bcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/47b560","pattern":"[url:value = 'http://5.182.210.174/47b560']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417ef614-6455-4ef7-93ff-00001a025443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acdc3b","pattern":"[url:value = 'http://5.182.210.174/acdc3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61daacef-4868-0f5f-69de-0000327c1a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e51ddb","pattern":"[url:value = 'http://5.182.210.174/e51ddb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18992714-8748-2852-46cb-0000bc4fd79f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5ee89","pattern":"[url:value = 'http://5.182.210.174/c5ee89']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb551eac-1ce3-b2eb-d3dc-0000eb547bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4b26b9","pattern":"[url:value = 'http://5.182.210.174/4b26b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20036c91-9cf2-7e55-94a3-000058e6e258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c9023c","pattern":"[url:value = 'http://5.182.210.174/c9023c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e778b6b-2fda-e3c1-4fbd-0000a6e2c41e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f873b2","pattern":"[url:value = 'http://5.182.210.174/f873b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdddb62-c885-324e-b1a6-0000258be8d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1d493","pattern":"[url:value = 'http://5.182.210.174/a1d493']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ea4c0-1444-05f2-8a84-00002361d6ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ec572","pattern":"[url:value = 'http://5.182.210.174/8ec572']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ceab23-97d1-ba8f-6832-0000ff523757","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d1d1d3","pattern":"[url:value = 'http://5.182.210.174/d1d1d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6deb3487-99ec-db28-a7e2-00009cfe80c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fefd81","pattern":"[url:value = 'http://5.182.210.174/fefd81']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc63305e-e619-45ef-ac79-000099a940d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7e327","pattern":"[url:value = 'http://5.182.210.174/b7e327']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b6a10f-fcf2-395e-1957-00006a3499e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba982a","pattern":"[url:value = 'http://5.182.210.174/ba982a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca4d9ae-9a9b-a058-4ef2-0000a6d12caf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de3e3b","pattern":"[url:value = 'http://5.182.210.174/de3e3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6a7a29-2238-d592-e4ef-0000bb5d2184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c6503e","pattern":"[url:value = 'http://5.182.210.174/c6503e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369cff40-9cfe-7de5-af2c-0000ee71ea45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/af8816","pattern":"[url:value = 'http://5.182.210.174/af8816']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6bbe3d-907a-0c19-420c-000078e30876","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dfbfd1","pattern":"[url:value = 'http://5.182.210.174/dfbfd1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a7d69f-d478-6ac5-077c-00009de9ee09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a74d7e","pattern":"[url:value = 'http://5.182.210.174/a74d7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ededa808-9494-488e-ea29-00004200bcdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b2ad0","pattern":"[url:value = 'http://5.182.210.174/1b2ad0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b8dc84-1b4e-258f-0ab8-0000fa7d4716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1493f3","pattern":"[url:value = 'http://5.182.210.174/1493f3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71c7d41-3ac9-834d-81c6-00000bbef91a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/18c0c9","pattern":"[url:value = 'http://5.182.210.174/18c0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93964e5f-13ca-6af8-6fc4-0000e400784a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6af82","pattern":"[url:value = 'http://5.182.210.174/e6af82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e69061c-c1de-b1ed-e1d0-0000837e61ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ef2a92","pattern":"[url:value = 'http://5.182.210.174/ef2a92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22018b82-1b0a-486e-b5fe-0000b9b7fb74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e9f60","pattern":"[url:value = 'http://5.182.210.174/8e9f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37899535-b4ae-ac64-4b30-00004e842739","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pm68k","pattern":"[url:value = 'http://157.173.119.111/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bafcbc5-a259-d5f7-6d83-00000d75a182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.arc","pattern":"[url:value = 'http://77.239.124.108/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b3f2fd-61d6-0809-2fb5-00003d88c4c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86_64","pattern":"[url:value = 'http://157.173.119.111/bins/px86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afddbb5f-79f5-07f1-1ddc-00006cc5f596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm7","pattern":"[url:value = 'http://157.173.119.111/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3da73-be82-1a10-2264-0000c6cc3d1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm5","pattern":"[url:value = 'http://157.173.119.111/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c58d9a9-44a0-5fe8-922e-0000179584dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.aarch64","pattern":"[url:value = 'http://77.239.124.108/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58edf57d-a4a5-f259-c88c-00001f2f35c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.powerpc","pattern":"[url:value = 'http://77.239.124.108/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0343dd58-e7d3-a111-a52e-00004d9a91dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.x86_64","pattern":"[url:value = 'http://77.239.124.108/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf9e2e9-05ae-dd29-a738-0000fa6c752c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv6l","pattern":"[url:value = 'http://77.239.124.108/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ca63b8-3e84-8e2c-d979-00000a5af914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm","pattern":"[url:value = 'http://157.173.119.111/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d4b12a-ecc3-90df-c272-0000bdcc0ffc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv5l","pattern":"[url:value = 'http://77.239.124.108/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e65b23-784d-ba20-eafc-0000de5b7ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pspc","pattern":"[url:value = 'http://157.173.119.111/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f2072d-4ee4-fb6b-bf46-0000d811958f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/psh4","pattern":"[url:value = 'http://157.173.119.111/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce77672a-7cfd-3454-1fcf-000025719fa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmpsl","pattern":"[url:value = 'http://157.173.119.111/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e2d3a8-0f09-b19d-dc67-0000c70c5c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv7l","pattern":"[url:value = 'http://77.239.124.108/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba5a1e3-adeb-c379-339a-00004e72f1e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmips","pattern":"[url:value = 'http://157.173.119.111/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fda2f2-178c-c5fd-d62b-00001d0bb25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sparc","pattern":"[url:value = 'http://77.239.124.108/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a0e57a-a7a4-d08f-0494-000058cf0c79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pppc","pattern":"[url:value = 'http://157.173.119.111/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb31e444-a8bf-5331-307a-0000e82956ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mips","pattern":"[url:value = 'http://77.239.124.108/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49cf806b-09a1-6436-9827-000080ac264c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv4l","pattern":"[url:value = 'http://77.239.124.108/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8da8bc9-3dcb-9a2f-b981-0000d47992f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm6","pattern":"[url:value = 'http://157.173.119.111/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e21bee2-c564-8397-97fd-0000683fd216","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.i486","pattern":"[url:value = 'http://77.239.124.108/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--871dd092-a7a8-ac24-b389-0000e8df8071","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.m68k","pattern":"[url:value = 'http://77.239.124.108/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e25c73f-4f8e-60bf-0a40-000014fe72e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mipsel","pattern":"[url:value = 'http://77.239.124.108/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212f8257-afbc-fe02-d62c-00003fe1ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sh4","pattern":"[url:value = 'http://77.239.124.108/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d12d4b4-a64f-f38c-9f0f-000020cc620c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86","pattern":"[url:value = 'http://157.173.119.111/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--133b1c4e-464b-b8df-7fa7-0000d90e510e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sparc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee38f883-9ca2-a34c-d9c2-0000e36233b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea95cdc-cdd0-e68a-7b23-0000c9e18000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454baa2-bc45-0e76-16c5-00005ca61fab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054014b-6426-cecf-e675-0000fda48333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sh4","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb007884-f85e-edd8-b8cb-0000f5ac05b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e2053ce-2397-42b7-53c0-0000c5bfd0f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1778aa22-1402-1d89-32be-0000c5897a5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sh4","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e600b1ec-d495-649d-eac4-0000a950f375","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sparc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6836df-487d-e0e8-f527-0000b8d64f57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mips","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afaf31f2-330c-9b2a-803a-0000c2025b74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm8","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f102c63-7842-81e7-2283-00009a614b22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm7","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44d074f-9ba9-e403-e656-0000c89c246d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mipsel","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92b1d28-30f5-4ee6-1064-000091f8c753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86_64","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa40ceb7-92e5-053d-99b4-000017c216c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7440209-f474-8259-6e56-0000b820998d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.m68k","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9879bb-261d-98da-555d-00003d548dd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a4875-bf24-a927-c5cf-00004557e3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.ppc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01c388-61e6-30f1-3a70-00008c80bb52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mips","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6c65de-8715-3490-68fb-00002fefefa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b4d2d2-ff30-32c1-2208-0000057974b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc6c4a5-850f-db1e-cf56-0000f654af71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm8","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60fe26-6f11-5175-745b-00000f3bd27b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mipsel","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b79d934-ef4d-93b1-6c87-0000ae37bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm7","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11279980-b86a-b4d4-720e-000010cada07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/dl.sh","pattern":"[url:value = 'http://91.92.42.242:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe4a4bb-17aa-c7bd-477f-000050710b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dlink.sh","pattern":"[url:value = 'http://31.77.227.102/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8b5c8d-e66e-9aa0-61ee-000071ff8557","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/dl.sh","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d2aeed-bd24-64e0-4d2c-00000d1524eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arc","pattern":"[url:value = 'http://94.154.43.67/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a04014a-2e62-f068-e1c8-0000970db8ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.i586","pattern":"[url:value = 'http://94.154.43.67/bins/David.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da639507-4fe3-d02b-d033-000029b41d4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03235831-4713-7dc6-fd1e-000001da6c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e178cbf2-e339-5f6b-0757-000034e6157a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.67/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b7f530-6c3f-d2c8-084d-0000ecd39350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/check3.sh","pattern":"[url:value = 'http://43.228.157.73/check3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c106e441-583c-4d20-41ab-0000565f3145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86_64","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6506e31c-7b9e-ae28-bba6-00007d7a1ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.ppc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932df75e-cf66-491a-083d-00008c766d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.m68k","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a76b91e-d937-fc3f-fd35-00006eaf0a26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/bin.sh","pattern":"[url:value = 'http://42.59.235.112:57254/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0443051-df96-88a8-1641-000037ffb2f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/i","pattern":"[url:value = 'http://222.141.13.126:32997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15aa7c88-1300-d243-3d8c-0000aed9738f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/bin.sh","pattern":"[url:value = 'http://182.116.50.112:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a13087b-49af-582f-acbc-0000e0b509e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/i","pattern":"[url:value = 'http://115.58.143.1:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88687dbe-b24c-0e04-0369-0000e24e78ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/i","pattern":"[url:value = 'http://182.116.50.112:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03a2e04-d1cc-92af-7557-00003e743d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/bin.sh","pattern":"[url:value = 'http://120.28.193.143:37216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58299042-c2ee-30f3-821a-0000b49b0e2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/bin.sh","pattern":"[url:value = 'http://210.208.111.100:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6529e1a4-781e-8783-4aff-00002fd0eab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.88.128:56380/i","pattern":"[url:value = 'http://123.8.88.128:56380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f0929c-e6c3-dc83-6c9a-0000feb51e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/i","pattern":"[url:value = 'http://120.28.193.143:37216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1242bc38-93e7-a0cd-bc40-00000eac309c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/bin.sh","pattern":"[url:value = 'http://42.235.52.223:51706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373a1dbc-3ee3-a56f-85f0-00000152f743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/i","pattern":"[url:value = 'http://210.208.111.100:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d824e15-2381-d2d7-bcc7-000083d7a4bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/i","pattern":"[url:value = 'http://42.235.52.223:51706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e61af26-4c34-e537-986c-0000db9c8e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/bin.sh","pattern":"[url:value = 'http://42.233.30.71:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a869601-7194-4adf-d769-0000d674245a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/i","pattern":"[url:value = 'http://42.238.236.39:56045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e5e8b3-6768-4698-a41a-000075a96a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/bin.sh","pattern":"[url:value = 'http://219.156.112.14:60974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786ba03e-7bb8-9a24-6035-0000aee48975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/bin.sh","pattern":"[url:value = 'http://117.131.92.150:58096/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537a0073-c4be-ef68-c5b6-000012110bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4","pattern":"[url:value = 'https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4867a0fd-a6ed-05be-93e4-000034bbed77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/i","pattern":"[url:value = 'http://42.233.30.71:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c82fad-30bb-332e-b7ac-0000a275f974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://smsechodata.cc/run.bat","pattern":"[url:value = 'https://smsechodata.cc/run.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c773e0-4dc0-cc32-f638-00005c86e89f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://timelevel12.com/big","pattern":"[url:value = 'https://timelevel12.com/big']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3553cfb-7bb9-6187-ef6f-0000251505a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.251.128:38940/bin.sh","pattern":"[url:value = 'http://182.122.251.128:38940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9feb84-ee8c-9b97-6458-0000cf7052ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/i","pattern":"[url:value = 'http://219.156.112.14:60974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d643ce8-1cc9-a4e2-bc02-00006aab1825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.gej.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.gej.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3efe6e-1ebc-4524-45c5-0000fd6172a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/Mozi.m","pattern":"[url:value = 'http://110.38.210.180:57109/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e71a9-34d8-1cba-4a02-0000982817e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/loader","pattern":"[url:value = 'http://176.65.139.194/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287f1b29-ad56-96f9-cb95-0000aa669fde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/i","pattern":"[url:value = 'http://125.42.255.46:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf36d12-cda5-15ef-a06d-00001f338420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/bin.sh","pattern":"[url:value = 'http://42.238.236.39:56045/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32a8545-e7e8-a056-4364-00001f68affe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/bin.sh","pattern":"[url:value = 'http://203.101.187.5:40888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcca8ccb-fac4-3720-f4b2-0000850bc01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/i","pattern":"[url:value = 'http://123.129.132.69:54242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8571c66d-7370-ad2b-3702-00000edb2c3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/bin.sh","pattern":"[url:value = 'http://113.237.104.66:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d34f33-619d-6966-930c-0000ba60cec7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/i","pattern":"[url:value = 'http://36.36.197.26:60794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f004216-df79-e3e7-a245-00002e92b7f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/i","pattern":"[url:value = 'http://113.237.104.66:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58aa08fc-acdc-71df-be14-0000b6720fbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/i","pattern":"[url:value = 'http://117.131.92.150:58096/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f891f41-cacf-f0af-d4e8-0000dc10976c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.173.101.30:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.30:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a97c8e-61be-7c54-65e7-0000335d5e7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1267fa3-b548-e64f-37a3-000055e246a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/i","pattern":"[url:value = 'http://203.101.187.5:40888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0e867f-337a-a639-fe78-000021ba7837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.196.158:47839/i","pattern":"[url:value = 'http://115.55.196.158:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6890956-86ba-160b-051c-0000d9e197a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.101.30:46920/i","pattern":"[url:value = 'http://123.173.101.30:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81952ca2-e670-0f0d-6ba8-000097dec044","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.35.11:45721/i","pattern":"[url:value = 'http://27.217.35.11:45721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89daee3-2a21-2426-1e8c-0000e1e85511","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4d9515-e113-99e9-60e2-0000eac067eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74f0526-7821-fc76-51bf-000053a2d74f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde74960-db3c-c525-1328-0000a3740dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd34e8-653b-89de-9711-00002ba1b93a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--821de771-5fb5-2367-750b-0000d37c4eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae079f6-13aa-e3c9-2f18-00001bc86ab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2583e4-d574-08c9-f771-000001372222","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddb049f-1596-b367-f74a-000077547436","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.11.225:54040/i","pattern":"[url:value = 'http://110.36.11.225:54040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16553036-eac0-9c42-4bcf-000010d74f12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/bin.sh","pattern":"[url:value = 'http://110.38.210.180:57109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b39698-ef2d-28de-4e80-0000720563b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:48881/bin.sh","pattern":"[url:value = 'http://156.146.26.225:48881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa18189c-c6f4-0126-b7d6-0000910804cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/bin.sh","pattern":"[url:value = 'http://115.50.178.232:56864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562d3084-41c5-658c-5927-000088d39c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.21.229:35387/bin.sh","pattern":"[url:value = 'http://115.52.21.229:35387/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2152139-ffed-6032-b4ff-00003e8e6a7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/i","pattern":"[url:value = 'http://218.59.109.9:54831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72953a46-cba6-eb4f-6dee-000025ad0d1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.35.47:51278/i","pattern":"[url:value = 'http://125.44.35.47:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09bad50-2b16-b815-53c5-0000e4bee3d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/bin.sh","pattern":"[url:value = 'http://116.53.20.49:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2297f57-5863-8891-6163-00007790806c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/i","pattern":"[url:value = 'http://61.53.119.47:53986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a80c84-d1db-08b1-1a9d-000066f2925c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/i","pattern":"[url:value = 'http://120.28.144.161:35460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1285976e-6604-e59d-d77f-000015edc8e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.204:47447/i","pattern":"[url:value = 'http://182.114.255.204:47447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91129709-7e0b-2b14-2225-0000361e1325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/bin.sh","pattern":"[url:value = 'http://120.84.212.190:40164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5021dd-48fb-305c-0102-000096d3a711","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/i","pattern":"[url:value = 'http://180.191.34.236:49441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0661af34-04ef-2e76-cfe7-0000c43ef90c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/i","pattern":"[url:value = 'http://125.40.3.106:41323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdee2692-fb10-82c9-807b-00008e8d65a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/i","pattern":"[url:value = 'http://115.56.66.143:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936e955d-8d54-1703-5725-0000362ecade","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/bin.sh","pattern":"[url:value = 'http://115.54.117.199:59554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47be1a6-2273-53e3-dcfc-0000a9310e81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/bin.sh","pattern":"[url:value = 'http://124.161.116.2:53893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cf495f-849b-672e-833e-0000b9f6072d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/bin.sh","pattern":"[url:value = 'http://116.140.186.83:34139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcf69e1-a9cd-fc40-bd75-0000e3b2f04d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/bin.sh","pattern":"[url:value = 'http://180.191.34.236:49441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f16aad-ccd5-558c-4b52-0000707eca2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/i","pattern":"[url:value = 'http://84.53.221.6:61495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c61815d-2dd8-73a1-63df-0000883f0015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/bin.sh","pattern":"[url:value = 'http://182.116.34.137:57791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc97ed0-e852-15ee-25d1-00002afb5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/bin.sh","pattern":"[url:value = 'http://115.50.0.3:52567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b072162-a3db-cae1-0f65-0000addedabb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/i","pattern":"[url:value = 'http://72.255.30.244:42024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f2e30e-9f81-648e-d51a-0000d8085b3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/bin.sh","pattern":"[url:value = 'http://182.119.15.73:52944/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--888208ab-0f56-2447-ce9d-0000ea349fa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.161.119:46353/i","pattern":"[url:value = 'http://222.140.161.119:46353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6ac967-86b3-60b7-7cd3-00000eb17c97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/bin.sh","pattern":"[url:value = 'http://61.52.159.43:42655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d5dc2c-8986-bdf0-3ecc-00001e15562a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.42.15:52214/i","pattern":"[url:value = 'http://180.191.42.15:52214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa26683d-17be-5812-8246-0000a7ec57c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.131.83:45094/i","pattern":"[url:value = 'http://125.46.131.83:45094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a822146b-e5b7-6593-0b4f-00004b3af776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/i","pattern":"[url:value = 'http://115.50.178.232:56864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb29c64f-fe5e-22f9-19a3-000050a2674c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.118.24:44651/i","pattern":"[url:value = 'http://105.186.118.24:44651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--157023fc-e120-ee93-be0b-0000a604c952","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/bin.sh","pattern":"[url:value = 'http://219.157.34.223:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a493ebce-6314-f405-b575-0000bbcb1699","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/bin.sh","pattern":"[url:value = 'http://182.114.192.77:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8879619-b7d1-046f-1784-0000b346e6a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/bin.sh","pattern":"[url:value = 'http://222.140.216.179:36444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462b2d73-458c-3e9c-4898-00002e57304e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/i","pattern":"[url:value = 'http://222.140.216.179:36444/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152ea14f-439a-644a-f623-0000e47a0f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.235.69:41594/i","pattern":"[url:value = 'http://60.23.235.69:41594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50eeebc-bb03-b0d2-2b22-00001f77b14a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://146.158.4.238:41633/i","pattern":"[url:value = 'http://146.158.4.238:41633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b78b7a-391e-28cf-473f-00002062cf1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.86.30:45927/i","pattern":"[url:value = 'http://125.40.86.30:45927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d200e1-ba6b-8f4f-bf10-0000348b4c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/bin.sh","pattern":"[url:value = 'http://112.113.101.43:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f9b757-d635-e96f-78b8-0000f2600f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.45.111:57854/i","pattern":"[url:value = 'http://182.113.45.111:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595a31-e794-b752-c68f-0000833c963a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/i","pattern":"[url:value = 'http://182.116.34.137:57791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83254d7-d564-d460-2b47-00006ab0af23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/bin.sh","pattern":"[url:value = 'http://115.57.30.45:34814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84543a72-70aa-d51a-583f-0000eaacb280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/bin.sh","pattern":"[url:value = 'http://61.53.119.47:53986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb043a-f1bb-1686-56ee-0000b550fbc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/bin.sh","pattern":"[url:value = 'http://219.155.73.196:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8179c3d5-105f-2ac4-a90f-0000b63affe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/bin.sh","pattern":"[url:value = 'http://182.126.113.147:53111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c889f5-11cb-ada6-999b-000038879df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.207.151:52550/i","pattern":"[url:value = 'http://110.38.207.151:52550/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c45330-e71b-6a07-ed5e-0000dd82a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/i","pattern":"[url:value = 'http://219.157.34.223:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a18168-763c-9fef-526c-000031fbe512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/i","pattern":"[url:value = 'http://182.121.244.13:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36c6fd6-9bec-12cd-bfbb-0000db135694","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.227.14:47543/i","pattern":"[url:value = 'http://125.41.227.14:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0fa25c-b864-6dc0-c89e-00009d5e517b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/bin.sh","pattern":"[url:value = 'http://36.70.226.107:53300/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc079a9b-7584-bcd5-90c8-000010fae530","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/i","pattern":"[url:value = 'http://118.173.224.60:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f368f107-9847-86a5-8382-0000bff76a4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/i","pattern":"[url:value = 'http://115.63.145.245:55982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1448ff7-3a14-c802-c09e-000089572107","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/bin.sh","pattern":"[url:value = 'http://37.157.219.158:39929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5f0201-3126-ffb8-8ada-00003c5601f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/i","pattern":"[url:value = 'http://115.57.30.45:34814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff1d3c-903a-43d0-1028-00000b69da83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/i","pattern":"[url:value = 'http://123.13.80.50:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5ba162-4fba-9e42-6254-0000f4805f8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.34.92:60244/bin.sh","pattern":"[url:value = 'http://42.6.34.92:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd482b8-0e41-a16b-e14e-0000b730064f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/bin.sh","pattern":"[url:value = 'http://42.239.179.192:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f722d085-3ad3-9a17-242c-000047d018c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.78.154:48079/i","pattern":"[url:value = 'http://123.11.78.154:48079/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7976fa3-e4be-4697-6b16-0000a346d7df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/i","pattern":"[url:value = 'http://27.37.101.72:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a1ff41-33ed-403a-1021-0000b7dbcc32","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/i","pattern":"[url:value = 'http://210.208.111.36:53831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d95b8-2d89-bf5d-f169-00001db9999c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/bin.sh","pattern":"[url:value = 'http://182.118.246.94:39103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf13f736-2fc7-2ed1-a767-00000bd3eae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/i","pattern":"[url:value = 'http://37.157.219.158:39929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2595ed0-8c3d-f1c9-5c4e-00004f70e9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/i","pattern":"[url:value = 'http://219.156.20.248:59087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bcd3eb-2623-7baa-862a-0000390313c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.74.117:55662/i","pattern":"[url:value = 'http://61.53.74.117:55662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01083f6e-b59b-aad9-c97a-0000e03a018b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/bin.sh","pattern":"[url:value = 'http://125.45.66.165:50850/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e480807-850e-319e-e1a9-000041e7108f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/i","pattern":"[url:value = 'http://125.45.66.165:50850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a10e85b-9278-7fc1-d53d-00001f8fed35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/i","pattern":"[url:value = 'http://220.177.11.228:55723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ab6cab-b95f-0226-b471-0000a917a94c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/bin.sh","pattern":"[url:value = 'http://120.28.144.161:35460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af82da97-efdd-070f-f1bd-0000744b24ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/bin.sh","pattern":"[url:value = 'http://118.173.224.60:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43f8dd4-f434-38ff-5b7b-000046bd13dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/i","pattern":"[url:value = 'http://42.87.163.211:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe50a37c-e376-67e5-7a1c-000047dc6aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/i","pattern":"[url:value = 'http://117.26.83.196:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108c5658-795b-c738-9f6c-00009e360f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/bin.sh","pattern":"[url:value = 'http://42.87.163.211:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95acf24-e067-8286-5a55-00000ceed800","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/i","pattern":"[url:value = 'http://61.53.110.220:49686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5becad-f3a5-1fe9-c713-00002ba4bf3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.162:42966/i","pattern":"[url:value = 'http://182.118.241.162:42966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--948cbdcf-cb96-e63a-3a42-0000dbe08bb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/i","pattern":"[url:value = 'http://115.50.0.3:52567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2454fbdd-c00d-c519-3f64-0000ea694e72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.176.10.219:58446/bin.sh","pattern":"[url:value = 'http://60.176.10.219:58446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60c1142-8238-1a9e-e169-0000dd0773ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/bin.sh","pattern":"[url:value = 'http://123.13.80.50:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c5ae3c-c6fc-d9af-b544-0000028dfe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/bin.sh","pattern":"[url:value = 'http://46.236.65.163:51558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e43fc18-e796-e5c0-4ae4-0000b19f0973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/i","pattern":"[url:value = 'http://61.52.159.43:42655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8caae4f-0931-0c7c-7e6b-0000c4853542","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/bin.sh","pattern":"[url:value = 'http://112.198.238.18:53312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c20e1d-cdf6-bb11-4e49-00000b61fb08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/bin.sh","pattern":"[url:value = 'http://222.142.252.116:35588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82704b3-f2b5-4c76-e7a8-0000f2087560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.204.30:46437/i","pattern":"[url:value = 'http://123.11.204.30:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b9b5f-77d4-212f-2392-00008b46b693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/i","pattern":"[url:value = 'http://112.198.238.18:53312/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10892792-14ad-eff2-02d4-00004440a0c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/i","pattern":"[url:value = 'http://182.114.192.77:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1080435f-a97d-0f4a-b730-0000a57ab3d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/i","pattern":"[url:value = 'http://66.212.173.225:35221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6afc56-9813-9d4f-588b-000089293126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.53.155:43350/i","pattern":"[url:value = 'http://125.44.53.155:43350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28acbc61-a6fb-ce16-b777-00002a73eae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/bin.sh","pattern":"[url:value = 'http://61.53.110.220:49686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a8fc15-7302-42dc-2410-00008e9fa176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/bin.sh","pattern":"[url:value = 'http://115.48.146.252:57987/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff527d-05ce-07d6-146b-00000dd06ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/i","pattern":"[url:value = 'http://123.9.41.95:38149/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfaf264b-b28a-0f7d-8229-00000d0e1a0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/bin.sh","pattern":"[url:value = 'http://125.42.255.46:55570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a79912-f610-8fc4-2794-000003e53529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/bin.sh","pattern":"[url:value = 'http://210.208.111.220:46346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cb6b3a-9499-0050-1e74-000057358c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/i","pattern":"[url:value = 'http://113.239.221.126:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f7dcfd-2db6-8f45-f374-0000473e4898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/bin.sh","pattern":"[url:value = 'http://113.239.221.126:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a14ec2-ca38-df39-90f2-0000a976f65d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.94.37:45880/i","pattern":"[url:value = 'http://175.147.94.37:45880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e224da17-1f24-c7de-0742-0000aacb39fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/bin.sh","pattern":"[url:value = 'http://84.53.221.6:61495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619dfa6d-095d-a311-c805-0000d494fb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/i","pattern":"[url:value = 'http://222.142.252.116:35588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a7f7bc-4a77-9874-001c-00002b7d037c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/i","pattern":"[url:value = 'http://175.174.110.158:47459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a8404d-935a-004e-19d2-0000a4403fa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/bin.sh","pattern":"[url:value = 'http://115.61.242.68:50097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebda5098-03ea-2ed8-a360-0000dbcbca93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/i","pattern":"[url:value = 'http://182.126.113.147:53111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e1d626-1f3f-1ea5-04d9-0000c8d9cf43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.231.77.43:2715/i","pattern":"[url:value = 'http://121.231.77.43:2715/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc48044-4ff0-ed52-edff-0000246ffe9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.66.162:41960/i","pattern":"[url:value = 'http://182.121.66.162:41960/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a63606-1c9d-48a2-38df-00004652aed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/i","pattern":"[url:value = 'http://115.61.242.68:50097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fdbdcc-f593-2712-c47a-0000fea474a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/i","pattern":"[url:value = 'http://120.84.212.190:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5c6d32-35da-1453-b87e-000061177c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.159.233:46480/bin.sh","pattern":"[url:value = 'http://222.140.159.233:46480/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd4212d-b8d8-0ec5-a9f3-0000c9c293bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/i","pattern":"[url:value = 'http://112.113.101.43:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6521ea5c-7485-c7f5-dd14-000079289927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/bin.sh","pattern":"[url:value = 'http://115.56.66.143:59123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67e3659-656e-33b4-443d-0000a9ba9d69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.253.241:39307/i","pattern":"[url:value = 'http://113.239.253.241:39307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab11b30-6359-4681-54ce-0000c54de824","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/bin.sh","pattern":"[url:value = 'http://39.78.26.151:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66fdb1a5-bcd8-7874-1e71-00001517cb1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.135:36545/i","pattern":"[url:value = 'http://120.84.212.135:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba27a654-febb-1fb1-87fe-0000c2946d7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/bin.sh","pattern":"[url:value = 'http://175.174.110.158:47459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1b2897-8803-182c-8d94-0000db128cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/i","pattern":"[url:value = 'http://115.48.37.12:47625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f10a15-86d8-4c18-babd-0000dece0eb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/bin.sh","pattern":"[url:value = 'http://110.36.75.82:45777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb30da8-760a-411c-a530-0000c4dbd5d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/i","pattern":"[url:value = 'http://125.41.72.148:43605/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a19203-db2f-dd4e-84d8-000014968035","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/bin.sh","pattern":"[url:value = 'http://113.228.208.46:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0eda54-e887-0e5d-e412-000003acc35e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/i","pattern":"[url:value = 'http://110.36.75.82:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec170c-a4ac-7b5a-a7ac-0000515396bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.168.51:58015/i","pattern":"[url:value = 'http://182.121.168.51:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8e75be-cbd4-072d-8b52-000063feb58c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/bin.sh","pattern":"[url:value = 'http://45.194.25.221:36557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448411aa-eb08-2666-c0a7-00009995f975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.187:38525/i","pattern":"[url:value = 'http://163.142.93.187:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4533d5-5809-61f0-0445-00008de962c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/i","pattern":"[url:value = 'http://45.194.25.221:36557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167238fb-e584-1ea1-6579-0000e4737562","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/bin.sh","pattern":"[url:value = 'http://39.89.94.52:43636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad96e195-19c4-66b2-28bd-000051a7cbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/bin.sh","pattern":"[url:value = 'http://212.164.115.235:52521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdcbd07-53da-6555-d5d3-00002f371d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/i","pattern":"[url:value = 'http://39.89.94.52:43636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ffe2ab-7df9-95d7-9f04-0000601189f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/i","pattern":"[url:value = 'http://210.208.111.2:53561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7461b67-fbff-a8d3-7709-00008f67b7e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/i","pattern":"[url:value = 'http://182.119.15.73:52944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35843c0c-a7a5-609a-7b8d-0000644a8239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/i","pattern":"[url:value = 'http://212.164.115.235:52521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b199f08-f40f-ee26-5e82-000068d72a48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/bin.sh","pattern":"[url:value = 'http://112.226.200.149:34560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd596e-d951-ebf6-f70e-00002524ebf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/i","pattern":"[url:value = 'http://112.226.200.149:34560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6594a6fd-edb1-2081-df98-00004655e97a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.17.244:47351/i","pattern":"[url:value = 'http://123.12.17.244:47351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac28673c-ad15-967d-b826-0000c60e0c6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53fd8bf-c9cb-d2ec-3625-0000c5f39e4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/etc.exe","pattern":"[url:value = 'http://178.16.54.109/etc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc80f0-f86f-ac1d-74fd-0000e8e3205b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.54.164:35591/bin.sh","pattern":"[url:value = 'http://175.146.54.164:35591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7273a15-0792-907f-c1c4-00006e384fd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/bin.sh","pattern":"[url:value = 'http://115.63.8.145:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac82399e-5d7f-7947-4e93-00000ec9bf4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/bin.sh","pattern":"[url:value = 'http://42.53.241.188:49853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3b4c0e-de11-8aa3-e448-0000132f81f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/bin.sh","pattern":"[url:value = 'http://115.48.37.12:47625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3efcb7-cb4e-2fc6-9707-00004d0f1eef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/bin.sh","pattern":"[url:value = 'http://125.41.72.148:43605/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae58635-6420-15a1-12a1-00006b6f4bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/i","pattern":"[url:value = 'http://115.63.8.145:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e3223a-ed97-a508-35df-0000433bd0de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/i","pattern":"[url:value = 'http://222.141.22.9:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a5da49-dcb9-a656-1324-0000565689fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/bin.sh","pattern":"[url:value = 'http://210.208.111.2:53561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5517ccf-d9fa-ba91-023a-0000f163c3ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80b7c69-9dde-af37-e3aa-0000a7285a8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd439fc-e76f-011e-2ef3-0000c7925452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb3d788-8024-9286-7166-00008741bec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/bin.sh","pattern":"[url:value = 'http://27.37.101.72:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca01b384-8cc7-3553-75fa-0000aaa53bd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/bin.sh","pattern":"[url:value = 'http://175.148.157.219:53297/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97a3744-75ba-2238-b9cf-0000a332585d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/i","pattern":"[url:value = 'http://175.148.157.219:53297/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c87b241-c29a-c2b2-8a97-00002001787c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.91.36:41931/i","pattern":"[url:value = 'http://119.165.91.36:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef65f483-69fb-6402-f6a1-00005a0d51f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.155.7:34948/i","pattern":"[url:value = 'http://119.189.155.7:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca8e376-2763-a905-013c-00000954da75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.sh4","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9628aae4-1119-bcd6-0605-00003bc0c1dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944830ef-0a36-0ad8-18a3-0000f1892df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f6bd07-5f3f-6fca-9248-0000f48cd4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86_64","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc308eb-0147-7868-9ece-00009b756350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm5","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbcbf78-ba30-7cad-2759-00000f1e312d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.spc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fa0121-1e89-e60c-d096-0000898a4383","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.ppc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cd69c7-e6dc-746e-41c7-0000317cabdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm7","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719087e3-b480-40df-cbe0-0000db1fb6ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9947ad-cb5f-b97e-1054-0000133d7974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.m68k","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5121fdb3-3944-7ba2-74e5-0000de158a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.i686","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b5737b-f2b6-2e6f-ee7b-000013cbafae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mips","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3267b5b2-ca35-ba8e-b88e-000078c8c1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mpsl","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ca5951-7dfb-f263-96db-000089c0ccbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm6","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af86d14c-db9d-8b08-5eb6-0000110ee3ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp.exe","pattern":"[url:value = 'http://196.251.107.186/clp.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f629fec8-2baf-43fe-5991-0000a347d6ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/get.sh","pattern":"[url:value = 'http://103.77.246.150/get.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80426e6-117b-df4b-41ba-00009daaae49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/zs64.exe","pattern":"[url:value = 'http://196.251.107.186/zs/zs64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cac3fb-0d9e-c3a3-a15a-0000d68176f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/3.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00511b1-8cdc-07bf-47ad-0000135906a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/144.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d08568-0f92-0752-cb40-000072956184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.8/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01cff90-aa41-82e1-7336-00008e405c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884bc92e-f166-f20d-1218-00003d93dad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.28/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81773290-e24a-b2f9-61da-00002a744d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3174c9a-3f79-17ab-10fb-0000dbedfdf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.107/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c8009d-2360-9685-7433-0000940224ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35378c31-47fe-8f40-5db8-0000fe54b874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/i","pattern":"[url:value = 'http://36.88.136.194:37137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d9371-548a-8787-0959-0000f344a313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/bin.sh","pattern":"[url:value = 'http://36.88.136.194:37137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0bdf04-7fd2-1039-0d59-0000620dede5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/bin/support.client.exe","pattern":"[url:value = 'http://104.249.10.175/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323edc9f-1b16-df58-2712-0000eed52de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc87503-c336-0d99-1cac-000031c73c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633b7b8a-2238-f55b-80bb-000065149282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.25/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c95abc-322d-58f8-4b5d-00009ade8d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4beab2d-cd86-8b74-0d08-0000a5c96b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/i","pattern":"[url:value = 'http://182.126.80.97:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e9b468-fa07-df07-b5ec-0000ebcdee61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ca2e31-6327-49fb-c3af-0000a169e893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/bin/support.client.exe","pattern":"[url:value = 'https://104.249.10.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8975431-842c-dd8c-0840-000061635446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.141/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64f2279-5d32-ac76-db41-0000ee870c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30efdb44-17ed-53b8-6cc2-0000d19c83bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.162/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0cb30b-3b28-850e-7cc3-00003e7d1bb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35260f9a-ae0c-4665-c28c-00005167e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/bin.sh","pattern":"[url:value = 'http://182.113.219.69:59860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbe7d2a-46a5-9102-e96b-000077e41f65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/i","pattern":"[url:value = 'http://182.113.219.69:59860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3c51d1-b021-b1ee-fee9-0000f4f20aa7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/Services.apk","pattern":"[url:value = 'http://94.154.43.74/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96757f9d-60d1-653d-36ee-000089758e11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/persist.arm7","pattern":"[url:value = 'http://94.154.43.74/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6703b685-60d1-8509-dc6f-0000381ec426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/bin.sh","pattern":"[url:value = 'http://42.59.237.57:55244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eddbd29-d486-f9d6-f6b1-00006ae34603","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/i","pattern":"[url:value = 'http://182.114.196.132:39255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823e2ff9-c715-757b-9801-00009d1e28b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/bin.sh","pattern":"[url:value = 'http://113.237.71.75:38677/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41401d4b-f305-4b61-07cb-000001090a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/i","pattern":"[url:value = 'http://113.237.71.75:38677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c277c10-7818-0a3d-7d62-0000ced06543","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.110.9:42389/i","pattern":"[url:value = 'http://182.127.110.9:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c33b0-6e66-1ab0-516c-0000ea2ca255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.37.62:48034/i","pattern":"[url:value = 'http://115.59.37.62:48034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143637ec-4b31-4ab1-be22-00000b3359d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/bin.sh","pattern":"[url:value = 'http://182.114.196.132:39255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec4d5e-90e6-2b51-2d3f-00007e3fd95c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/bin.sh","pattern":"[url:value = 'http://45.170.224.217:54350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184daebf-af17-df8f-653a-0000029d50d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/i","pattern":"[url:value = 'http://45.170.224.217:54350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df89fa8-7158-edcc-76a9-000066a2a5d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.169.99:44901/i","pattern":"[url:value = 'http://115.50.169.99:44901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1293e3-6444-5a61-ec32-0000f60783f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/bin.sh","pattern":"[url:value = 'http://123.14.176.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b8846a-1a0b-e945-c4ed-00002b636d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/i","pattern":"[url:value = 'http://123.14.176.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f0eb01-7928-2fac-b330-0000f583f751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie_sh4","pattern":"[url:value = 'http://103.226.250.88/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a140b488-de8b-2318-9501-0000ed25251b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_sh4","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1874269-ab75-0600-5c40-000002e38ed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86_64","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41256df-c7f0-9964-b208-00006dfbbced","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_ppc","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f170e1-d607-6fb5-1939-0000b9d344d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_m68k","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea26e1d-5cce-0544-2e31-0000232ef11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm6","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a55e8b-2a75-9a51-7b6c-00009b92967b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm7","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c78d01d-1663-a56f-8771-00003f6e4980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ab3fa7-2010-303c-f2b4-0000319b5ef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm5","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a06711-d4a2-5806-11f0-000015f8d298","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c33b67-a60a-bf44-cdd4-00008731e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie.sh","pattern":"[url:value = 'http://103.226.250.88/onie.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680f82fe-f2d9-4cd5-7961-0000d226fc44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mpsl","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd4437-fc7b-1f44-db91-0000b925920e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mips","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e8198-63d5-c83b-25ba-0000e48f18a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.24:55996/i","pattern":"[url:value = 'http://175.148.156.24:55996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7980f-29ee-8cf1-13df-000078dc7508","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79cacbcc-31aa-0f2a-a6f6-00003f7c0fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11adac4a-73e2-cd9f-92df-000023ae6119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.233/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4a394e-00ab-e3a9-5304-000016ffc0cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.233/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5da7be-1075-72a0-7247-0000cf2a91f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.233/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073bbdd9-6a14-afe9-e329-0000964e72c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfca94e-e2ff-736e-c09d-000045bc5cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464edc8b-3576-6bd4-0ea9-0000a5ff570d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.233/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d1fa8d-c8a6-e3dc-33f7-0000021c2668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe7293f-f103-2701-3603-0000a1690f9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mips","pattern":"[url:value = 'http://176.65.139.233/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cb1de9-864b-449a-0e00-0000a19fd946","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.233/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ca70dc-bcea-8cd0-4bfd-0000246bdb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.arc","pattern":"[url:value = 'http://176.65.139.233/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a369f4-317f-8700-373f-0000bd5bbcfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af77399-89ea-d289-4025-0000217f8b21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.i486","pattern":"[url:value = 'http://176.65.139.233/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024724a8-1168-1892-8d26-00003a4d7ce1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/a.sh","pattern":"[url:value = 'http://176.65.139.233/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcb422b-9f35-dfc2-c1c7-00000e97da9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/bin.sh","pattern":"[url:value = 'http://42.230.30.16:36416/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f6ae85-73de-8e76-52b8-000077d25a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/i","pattern":"[url:value = 'http://42.53.241.188:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ed4c2-94a1-a042-5f9d-000079063ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.194.151:33197/bin.sh","pattern":"[url:value = 'http://124.94.194.151:33197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34983501-b138-469c-b866-0000a951f66d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8722997249/utRRFWX.exe","pattern":"[url:value = 'http://62.60.226.140/files/8722997249/utRRFWX.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3716d1ea-5e77-7779-760f-00003cf451e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.162.199.149/uploads/cl1786993325592.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669466-7ea4-9ba7-bc5d-000009d079d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/bin.sh","pattern":"[url:value = 'http://180.191.122.115:57936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd49685-bcfc-51bf-3fc5-0000b52da72b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/i","pattern":"[url:value = 'http://180.191.122.115:57936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368c1f7b-5209-a670-8876-0000858603bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/bin.sh","pattern":"[url:value = 'http://210.208.110.51:48541/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b62c3a5-77db-86ac-30e0-000068ae5e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/bin.sh","pattern":"[url:value = 'http://123.189.139.234:49221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0702f57f-a8d0-38e5-70d0-00002c1e1e10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/bin.sh","pattern":"[url:value = 'http://125.44.52.238:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4521ab-3b9d-5727-6a39-0000ab72572c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.188.143.100:53340/i","pattern":"[url:value = 'http://14.188.143.100:53340/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a73f4b7-a476-5d78-4918-00008dbba94e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/i","pattern":"[url:value = 'http://42.230.218.53:49708/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c207be20-c88b-ef56-dcac-000028191519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/i","pattern":"[url:value = 'http://115.48.150.119:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8ca9df-1e55-db8e-1bf4-0000e968ff34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/i","pattern":"[url:value = 'http://210.208.110.51:48541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8c8f9c-a326-90c6-c9f0-0000586a4f3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/i","pattern":"[url:value = 'http://125.44.52.238:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112f5ee5-0f12-c8fe-e88e-0000d4b61a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8714097194/VicVgdL.exe","pattern":"[url:value = 'http://62.60.226.140/files/8714097194/VicVgdL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6fd406-41b9-87be-370e-0000c8a24532","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/i","pattern":"[url:value = 'http://123.189.139.234:49221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ee2dd8-216c-a100-a930-00001074b4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/i","pattern":"[url:value = 'http://182.117.76.70:54885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf571c83-437f-ca36-f9e4-0000047d79c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/bin.sh","pattern":"[url:value = 'http://60.18.25.174:34688/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799c65a1-6a8d-001e-529c-0000cdff320d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/y","pattern":"[url:value = 'http://154.90.70.23/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c3fe37-4262-fc26-d61b-00005d00e9da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/bin.sh","pattern":"[url:value = 'http://36.36.197.26:60794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c70e69-03d5-8c72-f68e-000028f3cf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/bin.sh","pattern":"[url:value = 'http://123.13.83.90:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270adbb9-3cc3-cb0d-fa95-0000bce075dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/bin.sh","pattern":"[url:value = 'http://115.50.6.146:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d1bfdc-3b25-b7a2-6450-0000e26cd91d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/i","pattern":"[url:value = 'http://123.13.83.90:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81efb0d1-14e8-128f-8de9-0000ac4d4b79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/i","pattern":"[url:value = 'http://60.18.25.174:34688/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66db52aa-c0df-6acc-d15e-0000b915a9f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.5:47999/i","pattern":"[url:value = 'http://42.224.101.5:47999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fa513f-a8b3-4631-e20b-00002589906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/bin.sh","pattern":"[url:value = 'http://42.235.36.124:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1cb75c-0f6d-81ea-bdc2-00002e55f6a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/i","pattern":"[url:value = 'http://115.50.6.146:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b73513-1eb6-7c51-6a72-00001d22bcd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/bin.sh","pattern":"[url:value = 'http://179.108.89.220:33758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b39b13-80f2-a377-e01c-00002acbe9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/bin.sh","pattern":"[url:value = 'http://61.137.195.76:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377d5b1-d19e-f076-208a-000002c404df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/bin.sh","pattern":"[url:value = 'http://115.57.84.167:36341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff189c4-0a8d-cde6-ddbd-0000422b9ae5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/i","pattern":"[url:value = 'http://115.57.84.167:36341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a9dafc-b719-e005-2c2d-00009c75f94b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/bin.sh","pattern":"[url:value = 'http://27.204.195.189:48250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e027f2e4-d7cc-ab48-6cdf-0000d91d0b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/i","pattern":"[url:value = 'http://219.156.62.179:56519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d126dd-d965-b977-e1cc-0000432d82af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/bin.sh","pattern":"[url:value = 'http://219.156.62.179:56519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3ba277-f386-2047-4cde-000088f20c49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/i","pattern":"[url:value = 'http://27.204.195.189:48250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c309bbf1-1304-058b-e0bb-00003e9d935d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/i","pattern":"[url:value = 'http://179.108.89.220:33758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f106c33f-43dd-8c10-2ed8-0000d2f5c64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/i","pattern":"[url:value = 'http://124.131.167.151:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56798f83-95f6-85b9-f2cf-000082c7ad3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/bin.sh","pattern":"[url:value = 'http://115.48.150.119:50908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76299329-718a-3ab2-2343-0000db347902","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.178.37:40893/i","pattern":"[url:value = 'http://61.52.178.37:40893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb701616-c66a-706f-459e-0000a0405e3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4c6cbc-c359-6c27-5610-00008e106b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.178.134:49781/i","pattern":"[url:value = 'http://105.225.178.134:49781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b0ba4d-2bc3-ecc8-dec4-0000597faed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/bin.sh","pattern":"[url:value = 'http://123.12.154.116:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9dc022-8390-ad20-34d3-00008afbefa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/i","pattern":"[url:value = 'http://124.6.168.74:46806/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea2d499-1274-d810-30b1-0000db380440","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/i","pattern":"[url:value = 'http://123.12.154.116:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73332173-291e-4ca2-6381-0000918ee721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/bin.sh","pattern":"[url:value = 'http://42.224.197.166:47521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9726233-9251-bc66-2ad0-00003b9b07ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/i","pattern":"[url:value = 'http://42.224.197.166:47521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9ca964-4bf8-05c1-768d-00003dd4fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.38.148:40790/i","pattern":"[url:value = 'http://113.221.38.148:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e834aa-8df5-bbe3-83bc-0000356204f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/bin.sh","pattern":"[url:value = 'http://175.150.250.245:59676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee07809-7c37-b737-db4e-0000bc4b6fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.136:45066/i","pattern":"[url:value = 'http://182.117.68.136:45066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb29f73a-0e65-1478-e8a8-0000c4c5ca35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/TispciphraLoader.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/TispciphraLoader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292d02e8-76e6-5763-66fa-0000246efa68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/i","pattern":"[url:value = 'http://175.150.250.245:59676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3435b3fc-4fc4-15a9-550b-0000d1f3f676","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/bin.sh","pattern":"[url:value = 'http://180.190.85.135:37478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7015996-970d-a1e6-9a15-0000119657b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/i","pattern":"[url:value = 'http://219.155.195.226:55894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e134b516-042a-a86f-fd49-000054db34c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arc","pattern":"[url:value = 'http://45.133.74.161/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3542f1d-b043-9608-c63a-00009e92d8ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86","pattern":"[url:value = 'http://45.133.74.161/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e5729c-7997-359b-bc26-0000cd1609bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/i686","pattern":"[url:value = 'http://45.133.74.161/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b677bad-99ee-b67e-5bce-00003acbdf40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/pay.xml","pattern":"[url:value = 'http://45.133.74.161/pay.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aed481f-ab59-9036-c457-00000517fa71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86_64","pattern":"[url:value = 'http://45.133.74.161/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770ed67e-037c-52b1-4b2b-00009ac34f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm6","pattern":"[url:value = 'http://45.133.74.161/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068c9811-38d2-6a95-cfcf-0000b40443f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm","pattern":"[url:value = 'http://45.133.74.161/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca0a08a-e17c-d022-5a8a-00006005c435","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/spc","pattern":"[url:value = 'http://45.133.74.161/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0009e6e8-b67d-9145-ffe9-0000227f2878","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm7","pattern":"[url:value = 'http://45.133.74.161/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a4e8c4-ea46-a198-af81-000025cc6550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/persist.arm7","pattern":"[url:value = 'http://45.133.74.161/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d471fc54-3001-33f7-a22b-000000c82c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mips","pattern":"[url:value = 'http://45.133.74.161/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a33a9d-7ff7-5491-da2d-00006bcb4247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mpsl","pattern":"[url:value = 'http://45.133.74.161/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985dc882-cb39-be59-8dd2-0000003efad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/m68k","pattern":"[url:value = 'http://45.133.74.161/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0787c4-7cd3-5668-98d6-00008876e0f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm5","pattern":"[url:value = 'http://45.133.74.161/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb4fc84-f04f-b977-77b5-0000664f2f6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/sh4","pattern":"[url:value = 'http://45.133.74.161/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee61ed3-cae9-d552-33cd-0000e691b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/ppc","pattern":"[url:value = 'http://45.133.74.161/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b530c37f-913b-3ceb-e552-00006dd5de57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/i","pattern":"[url:value = 'http://180.190.85.135:37478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dedc688-d4ac-bb4b-d19d-0000584be1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/Services.apk","pattern":"[url:value = 'http://45.133.74.161/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba2d757-550e-3af7-1c14-00006b24ec3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:52495/i","pattern":"[url:value = 'http://117.146.92.46:52495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d38c62-7e0e-2ee6-0a0f-000037c90ecc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/bin.sh","pattern":"[url:value = 'http://162.255.251.91:37737/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95643844-faa1-6488-d4aa-0000dea5799d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/bin.sh","pattern":"[url:value = 'http://182.117.76.70:54885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82485bef-037c-aa9e-2a89-000077809f8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.156.30:49683/i","pattern":"[url:value = 'http://115.56.156.30:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d416d46-7760-c047-3c90-000051e9d00d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/bin.sh","pattern":"[url:value = 'http://221.15.8.180:46594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb18424-26ca-8661-ea57-000028bb75eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/i","pattern":"[url:value = 'http://221.15.8.180:46594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c41e55-32fe-3ffe-9f67-0000d6499014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/bin.sh","pattern":"[url:value = 'http://123.11.72.60:34472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1132202-fdc8-4bcc-31b6-0000d4fe968f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/i","pattern":"[url:value = 'http://162.255.251.91:37737/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50480f4c-bd7a-bfe0-2ef3-00007269e437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/i","pattern":"[url:value = 'http://123.11.72.60:34472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cd86-c2ce-5e40-431f-0000ec490e8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/i","pattern":"[url:value = 'http://42.237.34.160:35437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae573e15-da7e-18f1-0ed8-00005a51fbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/i","pattern":"[url:value = 'http://182.126.119.188:36580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f12b56-73a6-b969-7779-0000208d288a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/bin.sh","pattern":"[url:value = 'http://182.117.179.242:55011/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2b82ca-a54f-3391-4eda-0000cd4755cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/i","pattern":"[url:value = 'http://182.117.179.242:55011/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6820f255-af86-b10f-e905-000083e50a6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/i","pattern":"[url:value = 'http://112.198.239.2:34176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0a153c-1b56-c522-f1bb-00000e67561d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.21:54646/i","pattern":"[url:value = 'http://210.208.110.21:54646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e1e527-ebdf-dbb6-d904-00003d70c015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe","pattern":"[url:value = 'https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6ac4eb-19e8-e570-e0d5-00005330e04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.38.203.20:51099/i","pattern":"[url:value = 'http://39.38.203.20:51099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe959b-571f-b0a3-f71c-000025dff200","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58a6a58-c5ad-c67c-af8b-000004a6d360","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b566e4-2a09-4f1c-c7ee-0000d231b6b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.mixierealty.com/wp-content/bin.exe","pattern":"[url:value = 'https://www.mixierealty.com/wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50c586-7729-6ea8-968a-0000cc2850ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://bserail.com/cabin/Diocle.emz","pattern":"[url:value = 'http://bserail.com/cabin/Diocle.emz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25aa73f-8654-d25c-f473-0000b1b97505","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836aeee0-d3ad-b3d2-4852-0000300ec3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b6da97-d67c-1417-7d37-000055ffd0f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/huawei","pattern":"[url:value = 'http://31.77.227.102/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7876738e-0259-3ae0-b737-0000a2a98d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/bin.sh","pattern":"[url:value = 'http://123.4.243.157:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a019a-378f-e0b1-5fd1-0000c652802f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab83b64-ca33-8f14-9c69-000042a0f28e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.spc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fe853d-80c8-d467-58c4-0000c4348020","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2687ed79-8e66-6bb9-302a-0000375a8d75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dac676a-b939-91c4-3a11-000044ea19d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9235020-f9c3-29a4-28b6-0000d4e72fc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df791f66-5ec8-5dc8-4e47-00005caf35e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472d310c-9c33-aa2b-f477-00007eeee74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2298f84-359d-7326-ec7f-0000ece3eae8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.spc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdb6caa-ccc4-d71b-285c-0000f8d0b290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.m68k","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098123ec-ddc8-5fd4-2ba3-00007098a8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm5","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60b66c2-82bf-ec95-277e-0000c22812ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86_64","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78f42c0-5f95-abf7-fde7-0000da91603f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm7","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805b71f-21f2-e5a1-47f0-000038e26d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86259eb5-9f48-0847-315d-000093250a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mpsl","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dd38a-62b7-e1de-3e95-0000eaa901b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.sh4","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd0013-bf0d-fe9d-c5d3-00001274f633","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06f31dd-b6ab-3064-69f3-00006a779846","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.ppc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90887256-3c42-3a91-7241-0000622d075a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm6","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f7587c-77a9-3730-b1d0-0000f826644a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mips","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85526f7-7338-90e5-9d76-00009c22066c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.aarch64","pattern":"[url:value = 'http://31.77.227.119/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce00a23-6305-3ef6-cb3f-00009498b779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.powerpc","pattern":"[url:value = 'http://31.77.227.119/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429021c6-b83e-c664-73fc-00001dc429b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mipsel","pattern":"[url:value = 'http://31.77.227.119/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6157d3-455e-3d68-3b97-0000b4f654a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv5l","pattern":"[url:value = 'http://31.77.227.119/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff87a98-f161-deab-e249-000061c0477b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.arc","pattern":"[url:value = 'http://31.77.227.119/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5f9ebc-0823-128c-55d8-00002c24a9f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mips","pattern":"[url:value = 'http://31.77.227.119/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff63ba1-21e3-0dc2-92b1-000044a0ca87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.x86_64","pattern":"[url:value = 'http://31.77.227.119/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257a6692-4182-5529-e001-000089967d16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv4l","pattern":"[url:value = 'http://31.77.227.119/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174c0410-a994-1088-74ae-0000f3562e76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv6l","pattern":"[url:value = 'http://31.77.227.119/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328eb6a6-3a78-e90d-a31f-0000911cc357","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sparc","pattern":"[url:value = 'http://31.77.227.119/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4fc41a-82d2-9d53-4437-0000ac322d48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.i486","pattern":"[url:value = 'http://31.77.227.119/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273aa6a-ce10-5e3f-84a4-00002cd27f2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.m68k","pattern":"[url:value = 'http://31.77.227.119/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9578330a-ae77-e844-e000-000053545cd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sh4","pattern":"[url:value = 'http://31.77.227.119/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5879b237-3219-f2e1-5318-00002a78b341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/bin.sh","pattern":"[url:value = 'http://115.49.73.173:58794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9961c0a-9b72-eb90-39e5-000006faabed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/i","pattern":"[url:value = 'http://116.2.60.14:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07bad22-f78f-a151-e216-000013c1bdc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/bin.sh","pattern":"[url:value = 'http://105.225.137.62:54095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7fe96-4aeb-c5a6-af3c-0000d2d26bac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/i","pattern":"[url:value = 'http://123.4.243.157:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469a6a3c-d14e-09d2-cb30-000056cfa06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/i","pattern":"[url:value = 'http://105.225.137.62:54095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c592e2d-e642-077b-241a-0000dd53703d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/bin.sh","pattern":"[url:value = 'http://182.119.7.9:33286/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104bbcfd-79a7-4f25-7fb3-0000e014dc91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/i","pattern":"[url:value = 'http://182.117.48.159:45678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f349a6-8173-c84f-dbf7-00002c8c3364","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/unifi","pattern":"[url:value = 'http://31.77.227.102/unifi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c18c58-48c5-19ea-2851-0000ed8c1f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/bin.sh","pattern":"[url:value = 'http://222.139.104.173:42207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00fc09a-f41e-aab0-0091-00005fb7b297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/bin.sh","pattern":"[url:value = 'http://222.141.107.55:60545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2c8424-e4fe-26dd-4b06-0000a6059a52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update","pattern":"[url:value = 'https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e07839b-b4d0-1c0b-c86f-00008bfa4cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.163.254:48146/i","pattern":"[url:value = 'http://115.201.163.254:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7116de6b-d61c-eb43-22ea-00005b9b3cde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.227:39666/i","pattern":"[url:value = 'http://115.48.147.227:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418ef35d-dad5-fc05-49b4-0000a583e455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/i","pattern":"[url:value = 'http://222.141.107.55:60545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c3eb02-ef23-ec1e-7f7e-00004815286c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/i","pattern":"[url:value = 'http://182.119.7.9:33286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e1b726-f938-d572-1ee9-0000b43f958e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/i","pattern":"[url:value = 'http://222.139.104.173:42207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e2c6bf-3381-33ec-862e-0000e9d00fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/i","pattern":"[url:value = 'http://42.235.36.124:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bef9eb-fa24-7d63-5f20-0000b866be60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.22.127:45156/i","pattern":"[url:value = 'http://42.53.22.127:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16030dfd-b044-21ee-f42d-000065cd8acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/bin.sh","pattern":"[url:value = 'http://109.171.67.100:40657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a701b52-fc8c-70ec-197d-0000627d05dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/bin.sh","pattern":"[url:value = 'http://116.2.60.14:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a8bfe4-7f4b-579e-0842-0000e1cda417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/bin.sh","pattern":"[url:value = 'http://117.208.42.53:55830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82806918-816a-031b-2ef0-0000bfc4e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/i","pattern":"[url:value = 'http://117.208.42.53:55830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1c05ed-0db1-6cda-2f81-00003c3aaeab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/i","pattern":"[url:value = 'http://196.189.98.77:59901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027fc31c-9621-abf6-ebed-0000c127f798","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/bin.sh","pattern":"[url:value = 'http://200.115.102.246:58251/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bed5709-6285-a7d1-5e23-0000d0e62bfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/bin.sh","pattern":"[url:value = 'http://123.129.132.69:54242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e62829d-a18c-8a2e-fd4a-0000abb4943e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/i","pattern":"[url:value = 'http://109.171.67.100:40657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a19fcb-53a5-b52b-ff87-00003e8439b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/i","pattern":"[url:value = 'http://200.115.102.246:58251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878085a9-7302-909c-b67b-00008993cce8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.69.200:37705/i","pattern":"[url:value = 'http://123.11.69.200:37705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5717dd10-0684-7808-3fb4-00005f15d81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/bin.sh","pattern":"[url:value = 'http://37.54.31.40:58523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11ae97c-a45c-44e3-c859-0000db4365a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/i","pattern":"[url:value = 'http://37.54.31.40:58523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b16e9110-acde-6342-3990-00002a00116b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/bin.sh","pattern":"[url:value = 'http://219.155.195.226:55894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb991b7-d30d-7b0a-d413-0000ee801de7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.219.43:42748/i","pattern":"[url:value = 'http://115.55.219.43:42748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d08f91-d6dd-0163-d3ec-0000326fc1fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/bin.sh","pattern":"[url:value = 'http://118.34.109.121:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee71ed1-a2bc-a981-f9a7-000092125203","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/bin.sh","pattern":"[url:value = 'http://219.155.104.55:50766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8c80dd-5f76-c39b-e98a-0000aeaab442","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/i","pattern":"[url:value = 'http://219.155.104.55:50766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4950e2ac-342f-306d-c16f-000023372179","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/bin.sh","pattern":"[url:value = 'http://42.232.225.154:44359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7dc4e1-724c-ee61-66a9-0000dd74e0f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/i","pattern":"[url:value = 'http://118.34.109.121:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b322a444-5350-98c7-2354-00009cee5808","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json","pattern":"[url:value = 'https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d625fd68-0cc1-f7ea-d437-000058a49457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/mips.sh","pattern":"[url:value = 'http://103.77.246.150/mips.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9127dcbc-93ad-8d90-4d45-0000b0b57d33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://qorvi.pro/fdab9755.exe","pattern":"[url:value = 'https://qorvi.pro/fdab9755.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0dcfa8f-612e-e574-96ca-00007f298e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/i","pattern":"[url:value = 'http://42.232.225.154:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883c48e1-d8c8-a654-63d9-00004b99463b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.49:47422/i","pattern":"[url:value = 'http://182.117.68.49:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--656d1d86-c25e-a99c-43a7-0000dda15300","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/react2shell.sh","pattern":"[url:value = 'http://91.92.47.97/bins/react2shell.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90522d7c-8843-61c0-dee9-00000cd2be3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/gpon.sh","pattern":"[url:value = 'http://91.92.47.97/bins/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0dea03-940b-92ff-2690-00002c109c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.213.139.254:60192/bin.sh","pattern":"[url:value = 'http://27.213.139.254:60192/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d7d32b-b898-1eed-8d08-000072cc3d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/bin.sh","pattern":"[url:value = 'http://219.157.16.206:50901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268f5ace-c6d0-a630-c356-00005214d5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/bin.sh","pattern":"[url:value = 'http://38.46.30.224:41739/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--981c3cbf-ce1b-0f7f-a403-00005d86d9ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/bin.sh","pattern":"[url:value = 'http://115.55.232.8:44911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7f8f5b-e01b-bd5e-4fbd-0000e83e6c1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.168.209:49180/bin.sh","pattern":"[url:value = 'http://115.50.168.209:49180/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8702be3-3681-cebf-3763-000079a7a7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/bin.sh","pattern":"[url:value = 'http://125.40.3.106:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6645867-04f6-d253-f85e-00008153eab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.195.50:44549/bin.sh","pattern":"[url:value = 'http://123.12.195.50:44549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05c1b2a-005d-8f6d-1cc4-00000a47502d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/i","pattern":"[url:value = 'http://221.15.197.170:53012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b63c454-7d62-ad8a-c862-0000e4eee121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/bin.sh","pattern":"[url:value = 'http://115.48.144.141:59560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4008d2c0-8bd1-33be-1c4d-0000d80cfc01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.223.184:51992/i","pattern":"[url:value = 'http://115.55.223.184:51992/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6dd48b-9c0f-1d6b-257f-0000cf41ac9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.43.84.8:46173/i","pattern":"[url:value = 'http://175.43.84.8:46173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cebc7bf-9e4f-4c36-9433-0000891786c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/i","pattern":"[url:value = 'http://189.7.90.15:36886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952299c3-5924-b4f1-49cf-0000127c1d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.234:43356/i","pattern":"[url:value = 'http://120.84.213.234:43356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed0fbf5-5ecb-63c3-fd67-000036e21e19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/i","pattern":"[url:value = 'http://115.50.226.58:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff36c843-3a71-71cd-e4af-00004a33be17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.245.135.249:57082/i","pattern":"[url:value = 'http://117.245.135.249:57082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464c80da-d4a9-35ec-161c-0000308160fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/bin.sh","pattern":"[url:value = 'http://105.184.13.132:52355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2fc8db-4890-175e-ff52-0000dd58ff9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.90.250:37580/i","pattern":"[url:value = 'http://182.120.90.250:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21a9de1-fd53-9e27-558f-000065dbf2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/bin.sh","pattern":"[url:value = 'http://61.137.199.253:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ad2489-0e22-71b3-2522-0000431d5ba0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/i","pattern":"[url:value = 'http://61.137.199.253:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--015887c1-1e45-ab8e-2b28-000075696e92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/bin.sh","pattern":"[url:value = 'http://111.72.43.182:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe5eb35-df2d-89c0-601e-0000bb3c5eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/bin.sh","pattern":"[url:value = 'http://221.15.197.170:53012/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c4c914-8a9e-8a7d-23f8-0000696824ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/bin.sh","pattern":"[url:value = 'http://210.208.106.68:49665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684f11c0-30a5-3c6f-2edf-0000d063ac97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/i","pattern":"[url:value = 'http://210.208.106.68:49665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4158278-b894-24b8-9704-0000cafc62b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/i","pattern":"[url:value = 'http://42.85.51.157:47726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49524c-4603-d3e6-063e-00000a7bf775","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/i","pattern":"[url:value = 'http://210.208.110.221:37492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad16cf5d-67bc-a22b-abaf-000028a48630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/bin.sh","pattern":"[url:value = 'http://210.208.110.20:60687/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2fc897-1e69-3f26-e3fd-0000a4d88b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.120.245:38927/i","pattern":"[url:value = 'http://42.224.120.245:38927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01940c0-77e4-7e5b-8cd8-0000f1cb34fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/i","pattern":"[url:value = 'http://115.50.157.21:42304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3006e521-a143-52c6-db20-00000793cbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/bin.sh","pattern":"[url:value = 'http://182.126.80.97:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27449a3c-ad02-f57b-2183-00002318be64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/bin.sh","pattern":"[url:value = 'http://210.208.104.156:49483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581ccbf1-1d29-1c0f-19e1-00007c7f0edb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/bin.sh","pattern":"[url:value = 'http://42.230.44.245:48721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812fe4aa-0669-191d-a407-0000b15a9628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/bin.sh","pattern":"[url:value = 'http://219.156.20.248:59087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d752d3-f094-e7ab-237b-0000eb83b601","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/i","pattern":"[url:value = 'http://123.172.77.129:45661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b99ae89-b534-878c-6f27-0000a3c5df2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/bin.sh","pattern":"[url:value = 'http://42.224.194.129:53622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d72ab9c-116f-3866-74af-0000f3877165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/bin.sh","pattern":"[url:value = 'http://113.239.81.215:38553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bb9b96-20bc-9cb1-0d27-0000c3eeb819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/bin.sh","pattern":"[url:value = 'http://92.124.120.65:43084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f2cd4a-9c6d-bb3a-8293-0000a49c779f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/i","pattern":"[url:value = 'http://115.55.232.8:44911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bfdf0c2-87d6-04a9-1812-0000b1ed6897","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.118.112:41221/i","pattern":"[url:value = 'http://61.52.118.112:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6d2f2c-bd75-48c2-31a6-0000e43edf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.152:53328/i","pattern":"[url:value = 'http://42.224.101.152:53328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d230214-83a6-97d5-ef2e-00007f085d6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/i","pattern":"[url:value = 'http://123.4.132.108:50167/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01d360b-5937-6888-d78d-000012395733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/i","pattern":"[url:value = 'http://115.54.224.69:44752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bd2738-d0d1-807e-9028-0000b11b8c8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/i","pattern":"[url:value = 'http://222.141.132.237:60298/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--251bee29-4ece-386a-a18d-000089722f6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/bin.sh","pattern":"[url:value = 'http://125.46.198.143:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e1f3c7-0435-eb8b-2313-0000880aa55a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/i","pattern":"[url:value = 'http://105.184.13.132:52355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc393d9e-364d-3f97-22b8-00003616103e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/bin.sh","pattern":"[url:value = 'http://196.189.98.77:59901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0b2017-50d7-b094-2c69-0000ef490d6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/i","pattern":"[url:value = 'http://42.230.44.245:48721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7127421-35b6-4975-b472-00007513a424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.219.0:36990/i","pattern":"[url:value = 'http://182.121.219.0:36990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c108fc9c-1c2a-e79a-f9c0-0000b6ad2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/bin.sh","pattern":"[url:value = 'http://218.59.109.9:54831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae980698-e8df-4a0e-764e-0000aff810b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/bin.sh","pattern":"[url:value = 'http://61.53.202.74:59244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06406f1a-9c5f-1f57-6def-0000717e55f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/i","pattern":"[url:value = 'http://60.22.195.207:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce3a5a0-3569-0fdd-af38-0000c77de3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/i","pattern":"[url:value = 'http://223.151.74.149:48587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603af7bb-da32-33f9-0ec5-0000a08cfaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/i","pattern":"[url:value = 'http://180.191.230.61:39051/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbaa136a-751b-342b-5530-0000e6da00f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/i","pattern":"[url:value = 'http://182.116.55.50:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dd8e59-afb5-3f5a-2875-0000ca794bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/bin.sh","pattern":"[url:value = 'http://42.85.51.157:47726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66b56dc-3da7-4d54-e905-00004664cb4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/bin.sh","pattern":"[url:value = 'http://219.155.209.143:51886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99739bb1-5e4d-9715-7034-00006b53a247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/i","pattern":"[url:value = 'http://210.208.104.156:49483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a631269d-07d1-8f57-7ef2-000093bdedb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/bin.sh","pattern":"[url:value = 'http://180.191.230.61:39051/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--696351d0-d3ef-776d-b8f1-00000ee42c00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/bin.sh","pattern":"[url:value = 'http://113.236.118.216:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c05937-378c-d39d-ca1d-0000254f92b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/bin.sh","pattern":"[url:value = 'http://115.54.224.69:44752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c52d740-8a94-f6b0-1eed-0000cff0ab62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/i","pattern":"[url:value = 'http://219.155.209.143:51886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64789e47-c4c1-ed3e-1096-000030bf8015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/i","pattern":"[url:value = 'http://61.54.43.35:53946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9044d-bd8a-b3fb-f637-00001757f4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:59953/i","pattern":"[url:value = 'http://41.201.226.25:59953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39df35a3-f1fc-f6cb-b10e-00009b15ab5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/bin.sh","pattern":"[url:value = 'http://189.7.90.15:36886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8feef2c9-f014-017f-8064-00000b30a4ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://95.165.187.102:54251/i","pattern":"[url:value = 'http://95.165.187.102:54251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f68114-55d9-dca8-039a-0000991fb012","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/i","pattern":"[url:value = 'http://81.227.43.128:45355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ab48f0-6831-fe6f-1a5d-0000381689d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/bin.sh","pattern":"[url:value = 'http://115.50.226.58:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6339bf53-b58c-ae0a-394f-0000a6d4ef5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/bin.sh","pattern":"[url:value = 'http://115.63.145.245:55982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4c354a-2ef7-bd11-36fc-00005420826b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/i","pattern":"[url:value = 'http://125.46.198.143:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f762bfba-9ca7-3968-3b40-0000fc5e8c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.182.147:58870/i","pattern":"[url:value = 'http://123.14.182.147:58870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205f54bd-9ebc-dca7-87f3-00001cf3fcf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/i","pattern":"[url:value = 'http://42.239.252.93:34307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb3385e-4948-32e4-655b-0000d7a318c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/bin.sh","pattern":"[url:value = 'http://175.167.86.22:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b3695c-3d02-db01-1d2b-00007787a083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/bin.sh","pattern":"[url:value = 'http://42.234.245.232:58215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b787c907-3153-549c-6c18-000098dd2918","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.131:40429/i","pattern":"[url:value = 'http://182.121.153.131:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6796b11-8445-d972-f0d5-00004642f7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/bin.sh","pattern":"[url:value = 'http://123.97.89.239:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20493c42-ed25-b66f-27d3-0000fb9b9ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/i","pattern":"[url:value = 'http://222.139.229.134:40628/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ca2318-31dd-452f-8b0a-0000235beb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/bin.sh","pattern":"[url:value = 'http://42.239.252.93:34307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c4abf4-3a7a-4849-b1f7-00009741fdb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.74:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0261e5b1-110e-aab6-e582-0000295687ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/i","pattern":"[url:value = 'http://42.234.245.232:58215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74b1047-0521-8966-5106-00002a6f5445","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.55.19:56855/bin.sh","pattern":"[url:value = 'http://115.55.55.19:56855/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016334e0-a5b7-e14f-8f42-00003205561a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.173.127:59094/i","pattern":"[url:value = 'http://42.235.173.127:59094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85751b7b-2995-6a4b-6bb8-0000258b8cb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.150.168:38582/i","pattern":"[url:value = 'http://61.53.150.168:38582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac30086a-043c-93ac-277a-00005f36b150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/i","pattern":"[url:value = 'http://123.97.89.239:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1c8c7b-37ee-05c1-e5ba-00002fe549ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/i","pattern":"[url:value = 'http://210.208.110.20:60687/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc7ee31-2ba4-52f9-7ad2-000014224373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/i","pattern":"[url:value = 'http://115.48.144.141:59560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d835f896-c401-cb36-91d7-0000873e2ea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/bin.sh","pattern":"[url:value = 'http://124.131.167.151:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1350a1e-e9ed-a79b-a258-00004e92e7ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/bin.sh","pattern":"[url:value = 'http://210.208.110.221:37492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9309535-92ba-2f97-1951-0000fc392cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/i","pattern":"[url:value = 'http://111.72.43.182:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fc4a46-f51b-26fd-c85e-00003efcad37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/i","pattern":"[url:value = 'http://182.121.250.74:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b8e7c0-e1ed-4177-829c-0000b15c8d6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.245.119:56931/i","pattern":"[url:value = 'http://123.14.245.119:56931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa9bfe2-7358-5a34-e741-00009247e821","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/bin.sh","pattern":"[url:value = 'http://61.54.43.35:53946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2cf3dd-1894-bec0-5f1a-00007c6e3d8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/i","pattern":"[url:value = 'http://92.124.120.65:43084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23f7327-d08f-0d90-5cf3-00007b001231","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.242.207:40709/i","pattern":"[url:value = 'http://123.11.242.207:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8981d19-b46c-d6a7-82de-0000e639aac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.248.137:53264/i","pattern":"[url:value = 'http://115.55.248.137:53264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb569e5b-4d2f-e210-d567-0000f955d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/i","pattern":"[url:value = 'http://175.167.86.22:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d99cda3-fcc3-30a6-f06a-0000d8cf2469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.214.107:59459/i","pattern":"[url:value = 'http://120.84.214.107:59459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3c9174-daa9-56d8-cec8-0000e0bb4202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/i","pattern":"[url:value = 'http://115.63.207.26:37498/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--161a212a-ea44-58f2-03d2-0000b0516a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.180.35:55889/i","pattern":"[url:value = 'http://222.140.180.35:55889/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4048ec-f16e-c4bd-d06e-00001af2e8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/bin.sh","pattern":"[url:value = 'http://115.63.207.26:37498/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81044243-2c43-a0b3-0195-000043889f28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/i","pattern":"[url:value = 'http://210.208.110.147:36598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b96a4b2-a5bc-6e77-7fbf-0000e1ab20d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.114.153:35365/i","pattern":"[url:value = 'http://182.116.114.153:35365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1cdeb0-8991-654b-0157-00003a920f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/i","pattern":"[url:value = 'http://210.208.111.220:46346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e6f6c-4b10-070f-eaa2-00008b080d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/bin.sh","pattern":"[url:value = 'http://123.190.18.137:43516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fe9955-70a2-82f2-4685-00006487473c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/i","pattern":"[url:value = 'http://210.208.116.107:58255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebafd5c-29aa-77d4-56ed-00001b765776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/i","pattern":"[url:value = 'http://125.112.59.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f4d3e9-602a-a93a-2824-000042800eeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.85.225:50581/i","pattern":"[url:value = 'http://36.69.85.225:50581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49899e-5b58-777e-4071-0000e6ba0aff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/bin.sh","pattern":"[url:value = 'http://210.208.110.147:36598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b587c5-cb12-ef4b-d8ae-0000acdb58f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/i","pattern":"[url:value = 'http://182.240.9.116:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bef2322-dae8-0c09-f3a4-000041a35f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/bin.sh","pattern":"[url:value = 'http://210.208.116.107:58255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ceeef-405c-ef30-ebb2-00009f8340f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.205.71:36863/i","pattern":"[url:value = 'http://175.175.205.71:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b359aa-4f26-62f7-118f-000019889971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/bin.sh","pattern":"[url:value = 'http://105.184.213.168:46781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaba294b-6e25-d7d7-2cb0-0000e74be21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/i","pattern":"[url:value = 'http://219.157.16.206:50901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5365b4-4e07-74fb-a40d-0000dcc98ce2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/bin.sh","pattern":"[url:value = 'http://60.22.193.90:43235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e5a0d7-d41b-d553-0d38-000002d7cc24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/bin.sh","pattern":"[url:value = 'http://42.239.149.237:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6caf3f7-6ced-5f6b-d00a-000000ddb9dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/i","pattern":"[url:value = 'http://38.46.30.224:41739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fac8baf-7f29-091a-f3da-00002145f1df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/bin.sh","pattern":"[url:value = 'http://210.208.111.74:34826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1e12b6-2cde-1e6c-7bb9-0000b75e8ac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.143.124:45357/bin.sh","pattern":"[url:value = 'http://117.223.143.124:45357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b8fc72-16b2-7319-cded-0000deb06c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/bin.sh","pattern":"[url:value = 'http://111.163.247.38:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1869d9-2f3a-0f01-eac7-0000d17d03d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/i","pattern":"[url:value = 'http://111.163.247.38:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3304f030-c828-33bc-261c-0000c3cc85a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/i","pattern":"[url:value = 'http://105.184.213.168:46781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2185126e-9278-852f-57d4-00005319a4d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/i","pattern":"[url:value = 'http://42.239.149.237:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839a03df-ecd9-7464-1a97-000049541eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/i","pattern":"[url:value = 'http://210.208.111.74:34826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaaedc3-f01e-774f-c59b-0000ba4caa2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.39:48840/i","pattern":"[url:value = 'http://112.242.56.39:48840/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c133c7bd-4b40-7a95-edcd-0000029b08b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/bin.sh","pattern":"[url:value = 'http://61.53.135.208:46338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32041c85-ba35-661a-af84-0000f29205b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.155:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7acc5d-86c4-eb30-cd85-0000478df8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/i","pattern":"[url:value = 'http://60.22.193.90:43235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1f5d11-4094-e4e0-5794-00006b8fa25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/i","pattern":"[url:value = 'http://61.53.135.208:46338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf54a176-077b-746e-3f57-00007f1049c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/i","pattern":"[url:value = 'http://182.121.231.155:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e963c1-4494-84a2-501a-0000f31ddb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/bin.sh","pattern":"[url:value = 'http://117.26.83.196:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c460d3-9b38-2e70-0097-0000824da3c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/bin.sh","pattern":"[url:value = 'http://42.86.155.61:50155/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e563d6b4-f7cb-e597-4831-000035f841fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.i686","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbd9a18-c9c6-aeb1-595c-0000d83d1a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c2203d-887a-4576-dbe2-0000382bb404","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/i","pattern":"[url:value = 'http://42.86.155.61:50155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8d0476-8970-fc67-45e1-0000536f6b3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2b4ac3-931d-308e-50c2-0000c1b533e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.76.29.161/389242390482/dlr.sh","pattern":"[url:value = 'http://31.76.29.161/389242390482/dlr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e200fe-6ff0-964f-f6de-0000052898d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/i","pattern":"[url:value = 'http://219.157.246.145:56603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b193552f-acb4-b30c-d72c-000069ad2f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/bin.sh","pattern":"[url:value = 'http://61.53.133.115:54046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0aa6c6-7eba-5845-9bcb-000079dc5d07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/gpon","pattern":"[url:value = 'http://31.77.227.102/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6088f-e534-0df1-5fdd-0000b976e407","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/hik","pattern":"[url:value = 'http://31.77.227.102/hik']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9590903-e2bd-c85f-d24b-00003545a917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/vitek","pattern":"[url:value = 'http://31.77.227.102/vitek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c64a6a6-f82c-4195-c7e7-00009b01da7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm7","pattern":"[url:value = 'http://31.77.227.102/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5757c380-4d0d-7905-2da8-0000009b1ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a640a5fc-3124-1f7a-936e-0000ed04c680","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fef34d2-946a-d6e3-ef3a-0000f1e4a881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mips","pattern":"[url:value = 'http://31.77.227.102/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93031da4-6659-a06e-22f7-00004c628d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507aa11b-fd61-2e75-9e6e-0000e3c91ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv5l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb972e6e-2dda-b1d6-48b3-0000d353acf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm7","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4961905a-d671-cd03-fd6b-0000dea93555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv4l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6561a102-c93f-a22e-045c-00007a5b4dc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dbaaa8-e2cb-df29-78b9-000066f4163f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.x86","pattern":"[url:value = 'http://31.77.227.102/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7a9043-19cc-5d3d-d2e7-0000473b6473","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401cf108-014b-0156-af33-0000e3c398e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm64","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439812f0-52eb-6812-e432-0000c7925d98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.x86","pattern":"[url:value = 'http://31.77.227.102/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301cd53c-7de0-fe8e-acc0-00003149347f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b639630-9d7b-ed2a-1243-000023bdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm6","pattern":"[url:value = 'http://31.77.227.102/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb43616-66cc-8176-e385-0000a9cd7c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9158486-acef-c951-73e9-000023fc9b91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc901ef8-8393-cbdc-5fcc-00006befcb91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm6","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de12b410-3e22-eb89-09b0-00009b40fcf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26ac78a-4bb1-c2f0-9807-0000310812f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm5","pattern":"[url:value = 'http://31.77.227.102/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55994f42-b857-be8b-2975-0000795a647f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm5","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b57f2d8-fb63-bd41-4eb9-0000a4696635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv6l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624cc399-4db5-1233-e80c-000099094f85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4cf2c1-2e5e-5917-5256-00003dfb3713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2525daf-06e6-6d8b-47e4-0000ac224c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm","pattern":"[url:value = 'http://31.77.227.102/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d867783-6ada-24c4-3596-000073a0290e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.aarch64","pattern":"[url:value = 'http://31.77.227.102/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09335b57-5ee9-2b23-dca4-00007b1a981b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.powerpc","pattern":"[url:value = 'http://31.77.227.102/d/xd.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb86865-1088-5f0a-e7de-0000d2f496cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daad005f-9912-187d-8e42-00003bf1f3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips64","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5344802-b609-8fc7-fb4a-0000eee6a0ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm64","pattern":"[url:value = 'http://31.77.227.102/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81cbc1a-b040-c766-4c7e-0000b9b6de0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mips","pattern":"[url:value = 'http://31.77.227.102/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8bd70e-f525-d55c-abcf-00004afb61fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mipsel","pattern":"[url:value = 'http://31.77.227.102/d/xd.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8315d08-31b6-0a08-12c1-0000a4ae37fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc440fp","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dce7ad3-a053-51ce-1e5d-0000d2b5b041","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mpsl","pattern":"[url:value = 'http://31.77.227.102/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2a233e-ce3d-94ac-c62c-0000bf9133ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6aaeac-a0b2-f3f6-175c-0000b9f7f881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c428a9-3af7-e9f1-7848-0000e38b8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm64","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471be5aa-eaad-4c04-7e38-000089f5531a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da3df21b-979a-c3dc-5f64-00009ae7c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7b1459-72f4-3031-cf43-00007e622fac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.228.109.209:34880/i","pattern":"[url:value = 'http://83.228.109.209:34880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2bedf75-879f-e69c-0082-00008c35a8bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/bin.sh","pattern":"[url:value = 'http://138.204.196.254:46255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c3ad78-740c-86db-0626-0000b7502daa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/i","pattern":"[url:value = 'http://61.53.133.115:54046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfa5b07-32d6-e891-5b41-0000f51eccfd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/bin.sh","pattern":"[url:value = 'http://113.239.216.250:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c3edbd-5dfa-c201-134e-0000d04d36c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/i","pattern":"[url:value = 'http://138.204.196.254:46255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22762a5-6d6b-d98e-8312-0000d9046689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/i","pattern":"[url:value = 'http://219.157.249.227:40515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558ca742-77d7-bf77-d704-00008220f970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/i","pattern":"[url:value = 'http://113.239.216.250:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ce8c1f-0f01-33ec-fa57-000008e699f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.40.206:33747/i","pattern":"[url:value = 'http://112.123.40.206:33747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4811f558-42ab-3977-0bc9-000095a20fe4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.x86_64","pattern":"[url:value = 'http://167.86.99.169/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89ed6a7-9f7f-0768-6185-0000e894d259","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.m68k","pattern":"[url:value = 'http://167.86.99.169/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe9055f-f9dc-c5ba-9f80-000037378285","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.217.97.115/topinmsi.png","pattern":"[url:value = 'http://217.217.97.115/topinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b2e271-da89-96a7-48dd-0000e8620483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mips","pattern":"[url:value = 'http://167.86.99.169/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc8fd10-f47b-3c97-3437-0000dcfd33b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp4.exe","pattern":"[url:value = 'http://196.251.107.186/clp4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75626935-e2ec-6229-1c07-0000c155b23a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3ee54d-e929-8e7d-c30d-00006e5c4151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b917cba-200d-5a3a-6751-0000383dab7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a207f576-ae5c-6c6d-790e-000053a5d1b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.172.167.65:8080/s.ps1","pattern":"[url:value = 'http://167.172.167.65:8080/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c24ec80-ee94-44c4-836d-0000db8b0693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.99.32.48/b2f628/cronb.sh","pattern":"[url:value = 'http://140.99.32.48/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d3a466-2ec4-e2f6-60ed-00006d9d083f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.141.58.166/b2f628/cronb.sh","pattern":"[url:value = 'http://209.141.58.166/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8632ab-332f-7186-e749-0000c8f08565","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/bin.sh","pattern":"[url:value = 'http://123.14.253.90:48325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b72ce-84be-213b-4b98-0000b5994d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/bin.sh","pattern":"[url:value = 'http://123.7.222.46:55307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae77be5-12f9-33a2-cefc-0000a9fa8079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.ppc","pattern":"[url:value = 'http://94.154.43.227/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb599b2-5fed-b965-50c9-00002924198f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.sh4","pattern":"[url:value = 'http://94.154.43.227/d/xd.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf077214-37ff-0336-4250-00006c34c01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm7","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57554a2b-7ff9-e4b7-8293-0000d1f9ee0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.x86","pattern":"[url:value = 'http://94.154.43.227/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57535c7e-1f02-f54a-acee-00004e7512b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.m68k","pattern":"[url:value = 'http://94.154.43.227/d/xd.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21091338-0e7c-2ed0-c951-0000c63d0891","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm5","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f68a8-d29f-782a-9de8-00004e83c46f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mips","pattern":"[url:value = 'http://94.154.43.227/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28dfd27-16a2-d9e6-fe68-0000fb6f7514","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeadae61-aad5-2b2a-9361-00002580aa25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mpsl","pattern":"[url:value = 'http://94.154.43.227/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a1c5bc-5578-d5ce-227a-00002f6ef2d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.spc","pattern":"[url:value = 'http://94.154.43.227/d/xd.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8004282-b9c0-e548-0d37-0000d488a77f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm6","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15f2c-ab4d-3dfb-4c08-00004464381f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.180:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4044d42-fb69-c954-754a-0000c5d2e9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/i","pattern":"[url:value = 'http://123.7.222.46:55307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b327e0c-a3e1-8b01-e8a1-00008407b929","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/bin.sh","pattern":"[url:value = 'http://42.6.252.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82671c71-b65f-fc93-0a8a-000094e4eeed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/2.7.exe","pattern":"[url:value = 'http://196.251.107.186/2.7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685aa78b-9fc2-2bc4-34c5-000073ee2363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c244cf58-5b6f-74d1-af99-0000ab0a746c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.154.157:40086/i","pattern":"[url:value = 'http://42.234.154.157:40086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a6a755-2f63-1df8-7722-000040f2855e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.powerpc","pattern":"[url:value = 'http://167.86.99.169/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d701e5d7-510d-1c13-384c-000028be51f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sparc","pattern":"[url:value = 'http://167.86.99.169/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ff8db3-efbc-17c0-88d5-000090410cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsrouter","pattern":"[url:value = 'http://167.86.99.169/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6577ef3f-5a13-ac1e-0634-0000ccc6ecda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsel","pattern":"[url:value = 'http://167.86.99.169/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b0fba8-af30-719a-c303-00001f34c2a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv7l","pattern":"[url:value = 'http://167.86.99.169/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddbe5f4-aa53-69f3-3016-000074b3922a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sh4","pattern":"[url:value = 'http://167.86.99.169/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30abcae9-ef1c-7190-12ee-00002254eb15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv6l","pattern":"[url:value = 'http://167.86.99.169/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029da86b-817e-2ea4-80e8-00005894b875","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv4l","pattern":"[url:value = 'http://167.86.99.169/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b86992a-9fc1-fb66-d0fd-000065f491c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv5l","pattern":"[url:value = 'http://167.86.99.169/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a2b8d7-0b54-596c-6d4e-00006874803e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.i486","pattern":"[url:value = 'http://167.86.99.169/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275bac66-723b-321f-7ee5-000046278982","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.arc","pattern":"[url:value = 'http://167.86.99.169/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183b6e82-b11f-ced9-8d15-00005cb22555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/telnet.sh","pattern":"[url:value = 'http://167.86.99.169/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5d1885-cab2-ec8f-ef42-000084492909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/cat.sh","pattern":"[url:value = 'http://167.86.99.169/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0a9114-495a-94d9-1456-000067d61c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/bin.sh","pattern":"[url:value = 'http://42.54.159.124:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fd4992-fd87-d729-1a32-0000e856531c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/i","pattern":"[url:value = 'http://115.48.163.180:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a611abaf-8f50-11a9-9abe-000001111a85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/i","pattern":"[url:value = 'http://42.6.252.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff91d9b-7bd2-9643-a89a-00003e3d34c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/i","pattern":"[url:value = 'http://123.14.253.90:48325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743711f1-3504-2bc5-2a3b-0000ab14da22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/bin.sh","pattern":"[url:value = 'http://115.57.233.250:43213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d2c6ba-c7f1-758d-8d67-0000c9c2fd38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/i","pattern":"[url:value = 'http://115.57.233.250:43213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de48dc-ca1a-569d-d20d-0000292eb3a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/1.sh","pattern":"[url:value = 'http://37.49.230.40/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966be732-c5a5-5f01-e86f-000018c6a93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/2.sh","pattern":"[url:value = 'http://37.49.230.40/2.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed78057-bad6-5a35-d9cc-0000beb1a289","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/3.sh","pattern":"[url:value = 'http://37.49.230.40/3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72a989e-67b3-e6df-93ee-000061d81927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/i","pattern":"[url:value = 'http://42.54.159.124:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446438-1e2b-d355-2d45-0000ae2eda9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe","pattern":"[url:value = 'http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0079e-85a1-161a-8733-000087dbf592","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'http://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff66655-0bc5-31a9-8b0f-0000f9783242","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86_64","pattern":"[url:value = 'http://176.65.139.209/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7461510-8e6b-26f1-1c1d-0000405ae488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/w.sh","pattern":"[url:value = 'http://176.65.139.209/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1aab49f-a9d0-ad24-d61d-0000b4939bd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm7","pattern":"[url:value = 'http://176.65.139.209/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb10955b-8c47-6c7e-d8de-0000851eea7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/spc","pattern":"[url:value = 'http://176.65.139.209/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc04c955-0442-7363-a0c4-000083540127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/sh4","pattern":"[url:value = 'http://176.65.139.209/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92907c32-5307-a5e8-b528-0000a01cd17c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mipsel","pattern":"[url:value = 'http://176.65.139.209/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fe9af5-2019-1271-5d68-000096d24977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/m68k","pattern":"[url:value = 'http://176.65.139.209/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d2ae23-a1a2-8778-6406-000096249fad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mips","pattern":"[url:value = 'http://176.65.139.209/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9562b02-5c90-d4ea-42c5-0000038a98d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/ppc","pattern":"[url:value = 'http://176.65.139.209/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ad8409-232b-0bf7-c506-00000c2ffcbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm6","pattern":"[url:value = 'http://176.65.139.209/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713cadc0-605a-3c8c-c25d-0000511f6dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm","pattern":"[url:value = 'http://176.65.139.209/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4d5b3-abf6-2fa1-d8c4-00001e9a5353","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm5","pattern":"[url:value = 'http://176.65.139.209/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e41acc-8462-46c9-ebb7-00007b89f6a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86","pattern":"[url:value = 'http://176.65.139.209/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a8a269-e222-e350-ed4c-0000f74c40d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.212/eclipse.sh","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4042b8b9-b1cd-b355-9c51-00008a37847d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.x86_64","pattern":"[url:value = 'http://176.65.139.212/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa326f6-6553-e030-de62-0000c93e3b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.powerpc","pattern":"[url:value = 'http://176.65.139.212/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acee58a-12a2-5efb-5fc3-0000470133ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv4l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9dfa5e-3fc1-75d7-f4f8-0000f2b9a096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i686","pattern":"[url:value = 'http://176.65.139.212/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a097496-7d2c-16ea-2851-00003f678520","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mips","pattern":"[url:value = 'http://176.65.139.212/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e3b649-3365-1c7e-6cb9-000000a1493c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv7l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d5d4cb-fab9-2001-fe82-00007a611a5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv5l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d24a2de-1b17-65ab-8504-0000d3536743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mipsel","pattern":"[url:value = 'http://176.65.139.212/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f88708-045f-d0fe-742e-00003dc1608c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv6l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6254040-0743-72d7-859d-00003f9153fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.m68k","pattern":"[url:value = 'http://176.65.139.212/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edb4407-faa4-a47c-a25c-0000742dd238","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i586","pattern":"[url:value = 'http://176.65.139.212/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7bf6a66-7fc5-2145-9ee1-00007ce0dfcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.sh4","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b2d0a8-781d-06e4-6576-0000874a5edf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/i","pattern":"[url:value = 'http://120.84.215.27:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1331b029-0c1c-141b-680c-000076f19650","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/bin.sh","pattern":"[url:value = 'http://81.227.43.128:45355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed99707c-3242-88ad-8698-00000f718661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.138.107.171:58489/i","pattern":"[url:value = 'http://116.138.107.171:58489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f573dd-a4ef-cd6d-eac8-0000b8e2cf29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.38.44:54807/bin.sh","pattern":"[url:value = 'http://125.110.38.44:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e3fb6b-4bfe-cae6-5fe0-00007ebfeaf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.252.20:55570/i","pattern":"[url:value = 'http://125.42.252.20:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6ce903-427c-7df3-f2e1-00003d889e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/bin.sh","pattern":"[url:value = 'http://46.16.150.139:51622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0d2d34-92f3-b278-aa36-0000898f2e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/bin.sh","pattern":"[url:value = 'http://85.12.251.50:45018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e263a65e-a110-9cc2-7d43-0000beb26d7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/i","pattern":"[url:value = 'http://46.16.150.139:51622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc7778d-d25b-6789-20c0-000078e57580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/bin.sh","pattern":"[url:value = 'http://103.160.130.178:42478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4065890-9066-4292-1fc5-000092648f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/i","pattern":"[url:value = 'http://85.12.251.50:45018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86847a8b-4ef3-a220-2d4c-00002613670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/i","pattern":"[url:value = 'http://103.160.130.178:42478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e26eab-d94a-ce28-e086-000094213202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/i","pattern":"[url:value = 'http://115.49.7.198:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6215a9-1a20-9d44-25d7-0000b6d6c56d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/bin.sh","pattern":"[url:value = 'http://60.23.239.236:48291/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15624c0b-a7d9-efc0-9eb6-00000753aa27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/i","pattern":"[url:value = 'http://60.23.239.236:48291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036e5113-a8ab-3692-a7f1-0000e3bc78ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nm/a","pattern":"[url:value = 'http://178.16.55.240/nm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba64df5a-5c2d-84fa-2e25-0000d92292e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:50791/bin.sh","pattern":"[url:value = 'http://196.190.133.180:50791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1805bd4a-cbe1-54ef-4189-0000a87a69da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.46.67:33765/i","pattern":"[url:value = 'http://222.139.46.67:33765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34753f0-739b-b86a-cb6f-0000389cec29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/a","pattern":"[url:value = 'http://178.16.55.240/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd498db-71c8-92d8-97a3-00004d8c894f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/bin.sh","pattern":"[url:value = 'http://124.6.168.74:46806/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cbd4a8-0491-171f-652f-0000caff52e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.134:40959/i","pattern":"[url:value = 'http://120.84.214.134:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9173aed8-c16b-201c-8092-00008e649056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/bin.sh","pattern":"[url:value = 'http://42.55.107.64:42203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b172d4b-41ea-dca2-2160-00002b40f89c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/bin.sh","pattern":"[url:value = 'http://115.63.82.0:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75492de-503b-6f8a-1140-00005c102006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/bin.sh","pattern":"[url:value = 'http://182.127.53.74:32795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd320d2-7a51-aa8f-cf9b-0000f02503c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.162.214.49:58599/bin.sh","pattern":"[url:value = 'http://60.162.214.49:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487b03f1-d01f-eaa7-1d07-0000ac8aa776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/i","pattern":"[url:value = 'http://42.55.107.64:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7608d0-5005-1f0b-9a18-000008402ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/i","pattern":"[url:value = 'http://115.63.82.0:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb29085-3f06-942c-1187-000047a6c4e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/bin.sh","pattern":"[url:value = 'http://182.112.34.219:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77502cee-c1be-ce02-1758-000005508229","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/i","pattern":"[url:value = 'http://182.127.53.74:32795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baf6919-4b22-be2c-f6c1-000015d7b3ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.19.212.208:47835/bin.sh","pattern":"[url:value = 'http://60.19.212.208:47835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43eead-2ff9-fff7-b43d-00000afe4548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/i","pattern":"[url:value = 'http://182.112.34.219:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571bcf40-a479-4f36-a7c6-000042ebca54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/bin.sh","pattern":"[url:value = 'http://123.4.132.108:50167/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71eeaae9-d7e8-fcc3-78a8-0000411f35ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nmm/a","pattern":"[url:value = 'http://178.16.55.240/nmm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f0bbf-c68e-9983-cab2-00003fe3790e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/i","pattern":"[url:value = 'http://119.183.51.162:34711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ed5f54-7307-1b5a-a95d-00007c5b1cce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/bin.sh","pattern":"[url:value = 'http://182.116.36.131:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9437857-c720-eac2-4809-000095b69eb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/bin.sh","pattern":"[url:value = 'http://60.22.195.207:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f330dec4-ca8e-a4b5-cb2e-00005bb2a3fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/bin.sh","pattern":"[url:value = 'http://110.186.228.173:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479b2fd9-fdad-e28c-9471-000003ef39f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/bin.sh","pattern":"[url:value = 'http://182.117.48.159:45678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed37052d-3381-0547-c0f8-00000129c1ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/i","pattern":"[url:value = 'http://182.116.36.131:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de4c800-f889-6823-d89d-000050323ef4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/bin.sh","pattern":"[url:value = 'http://123.9.245.182:54119/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7ffa28-73d5-a61d-acd0-0000ecc13760","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/i","pattern":"[url:value = 'http://123.9.245.182:54119/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52c32b-a968-3d63-c20b-0000a5dc5871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/i","pattern":"[url:value = 'http://110.186.228.173:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af95808f-48e4-edf3-b157-0000a5f9e63c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/px86","pattern":"[url:value = 'http://31.77.227.134/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6df74c-75cd-1dd5-7888-0000e5085b58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/bin.sh","pattern":"[url:value = 'http://210.208.111.26:55671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb3a85e-34cc-2db8-8c74-0000a6e2927f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/bin.sh","pattern":"[url:value = 'http://60.23.192.74:54261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363da11-4a08-0fdb-598c-000046fe91fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/bin.sh","pattern":"[url:value = 'http://110.139.34.163:54048/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd17407c-ed4c-7230-95a3-0000da371ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.129.220:50657/i","pattern":"[url:value = 'http://115.55.129.220:50657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b6b767-2ec1-5e25-7921-00003068b6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.46.86:54016/i","pattern":"[url:value = 'http://115.61.46.86:54016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e685e54-4ca5-4e12-be88-0000f8925a1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/i","pattern":"[url:value = 'http://210.208.111.26:55671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233713fe-d864-140a-5671-0000927effca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/i","pattern":"[url:value = 'http://60.23.192.74:54261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb07afa3-8b59-fb02-ee8f-000098b393e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/bin.sh","pattern":"[url:value = 'http://42.237.34.160:35437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a3860c-28c9-e149-6d95-0000df6a71b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/i","pattern":"[url:value = 'http://110.139.34.163:54048/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c0251f-26c1-75a9-ccac-0000909bb3f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.146.90:36045/i","pattern":"[url:value = 'http://123.5.146.90:36045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb9a077-665d-9f53-e594-0000b9728c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/bin.sh","pattern":"[url:value = 'http://36.26.210.12:56867/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2678a3-8f7f-9b30-280c-00001aa3d068","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/i","pattern":"[url:value = 'http://210.208.110.130:49996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4822490-4a3a-8922-4f5d-0000fb3bfe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/bin.sh","pattern":"[url:value = 'http://221.14.38.136:39999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88636432-f84e-784c-aa6f-000006b3ea99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/bin.sh","pattern":"[url:value = 'http://78.165.96.230:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b7878c-4f49-7b32-f4e2-00003d9e8fb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/bin.sh","pattern":"[url:value = 'http://98.252.87.232:48523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba1a632-b5d5-23f5-2c69-00008a15fc1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/i","pattern":"[url:value = 'http://221.14.38.136:39999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5890b118-32dc-4a87-13a5-0000eb92bb83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/i","pattern":"[url:value = 'http://36.26.210.12:56867/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac03dd6-dc56-a37a-bd40-00008cfe86b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/i","pattern":"[url:value = 'http://78.165.96.230:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22bb344a-e86f-892f-f93d-00006ee2d469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/2K4xFEq.bat","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/2K4xFEq.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcfb89e-3e11-7949-2a1a-0000243c2b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/dp.sh","pattern":"[url:value = 'http://194.238.57.124:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618c5bf5-52a9-c504-7958-0000fa38bf60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x64","pattern":"[url:value = 'http://194.238.57.124:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a4b554-e837-808a-9de3-0000d7cafeec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc440","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec11fca-129e-3fdb-9a69-00004977aa3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sparc","pattern":"[url:value = 'http://194.238.57.124:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffb4ae4-5e79-82e8-b84e-00007a64b1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm4","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb32699-9aa0-6082-b10b-00009702a7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11011757-2509-b8f9-85dd-0000ef01c98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x86","pattern":"[url:value = 'http://194.238.57.124:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1c4ce-57c2-5059-6fed-000017dc3e09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sh4","pattern":"[url:value = 'http://194.238.57.124:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f52bc8-b2a0-a77b-3c33-0000d06d794d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm6","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea63534-163b-cdd7-8589-00004a90cc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.m68k","pattern":"[url:value = 'http://194.238.57.124:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f21b5e-2164-b9c8-628b-000068d11e28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm7","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428a01e2-c591-c6a6-1f72-00004a661a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mips","pattern":"[url:value = 'http://194.238.57.124:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fc7a72-5fec-d8cf-0b34-0000c2d8d6a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm5","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941e8f2a-62f6-5730-877c-000087b83feb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i686","pattern":"[url:value = 'http://194.238.57.124:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979a5b44-b94d-efd9-5df5-0000ca709ee0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i486","pattern":"[url:value = 'http://194.238.57.124:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0618431c-0a6d-d771-57f9-000029729b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mipsel","pattern":"[url:value = 'http://194.238.57.124:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9d904c-6eea-9518-7287-000072095444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/i","pattern":"[url:value = 'http://98.252.87.232:48523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529ef74a-10a0-be79-6981-0000c53184d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/bin.sh","pattern":"[url:value = 'http://39.74.33.126:60319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ba651d-5630-c3c6-8096-0000d3b6b05e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.146.78:40164/i","pattern":"[url:value = 'http://27.44.146.78:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f916cf22-4ee1-caba-f5b0-00007709a909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/bin.sh","pattern":"[url:value = 'http://27.194.211.108:59780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8683c6-25b2-a1a4-e5a0-00007521423d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/i","pattern":"[url:value = 'http://39.74.33.126:60319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcad2f0-a820-9c04-d52f-0000890dba60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.39.1:58961/i","pattern":"[url:value = 'http://125.44.39.1:58961/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97fef9e1-2bf8-4529-4ac5-0000c32d7a41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/i","pattern":"[url:value = 'http://27.194.211.108:59780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb597bc9-e7c3-d344-9967-0000b474a1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/bin.sh","pattern":"[url:value = 'http://182.116.55.50:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea550ed-5f0d-e230-4383-0000494b0cd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/8EiMnJ7.exe","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/8EiMnJ7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbb9ce4-8ffb-d2ba-648d-0000dbda92df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/bin.sh","pattern":"[url:value = 'http://123.11.13.6:54335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31ecc05-e5c1-0501-6273-00006ffd2287","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/bin.sh","pattern":"[url:value = 'http://115.55.236.112:38216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be950735-a392-3109-472a-000019f29367","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/i","pattern":"[url:value = 'http://115.55.236.112:38216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8a9ef8-9c5f-993e-eac1-0000ad0eaa36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/i","pattern":"[url:value = 'http://123.11.13.6:54335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fd90cc-f7fc-c7fb-da73-0000de8e2ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe","pattern":"[url:value = 'https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a092374c-1966-9e46-888c-000003f063f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/bin.sh","pattern":"[url:value = 'http://218.13.149.41:34202/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d546336c-7468-8c5a-dc59-0000de6ff6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/i","pattern":"[url:value = 'http://218.13.149.41:34202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac8abaa-4b67-fc74-4c09-0000f8d5b2a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/bin.sh","pattern":"[url:value = 'http://175.173.72.28:43930/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ddf40-5749-e9a2-5251-00001145eeb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/i","pattern":"[url:value = 'http://175.173.72.28:43930/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b002974f-9b92-740f-d644-00005fbef212","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/bin.sh","pattern":"[url:value = 'http://115.62.190.249:52785/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad7a1b3-2ce9-d327-7342-00009cc5cf82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/i","pattern":"[url:value = 'http://182.113.33.72:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f559244-8f0c-7ffd-c5a7-0000db932dce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/i","pattern":"[url:value = 'http://115.62.190.249:52785/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b9a47b-06b1-44de-b295-0000d404b04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.253.62.1:52995/i","pattern":"[url:value = 'http://117.253.62.1:52995/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbcb70c-48cd-dd87-67df-0000943f7b9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/bin.sh","pattern":"[url:value = 'http://42.238.169.3:40436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad604a0-6c2d-06a6-74df-000026d2aa01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/i","pattern":"[url:value = 'http://42.238.169.3:40436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2806f6-9d9f-2504-23a2-000026d0450e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/bin.sh","pattern":"[url:value = 'http://175.146.159.250:58407/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b242265d-2417-73a0-9ed5-0000cb1e5b67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/bin.sh","pattern":"[url:value = 'http://60.23.123.119:52447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c23709-441e-72f4-03f6-00001eca7db1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/bin.sh","pattern":"[url:value = 'http://221.205.0.233:37221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c649340-d469-4d4d-fa0f-0000945fb4aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm5","pattern":"[url:value = 'http://31.77.227.121/satan_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdae08b6-64f6-13a5-11ae-0000cc12c316","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f9b26a-c920-358b-2696-0000a3a48dca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_ppc","pattern":"[url:value = 'http://31.77.227.121/satan_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56dc2fa-bf4d-6820-42fe-000086ea1b44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm6","pattern":"[url:value = 'http://31.77.227.121/satan_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6612e8d0-b2a1-0243-3be8-00001ce17854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips","pattern":"[url:value = 'http://31.77.227.121/satan_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6271393b-3019-c0fb-9ccd-0000f5ce83ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/$b","pattern":"[url:value = 'http://31.77.227.134/bins/$b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89334a8-5f30-52d6-01bd-0000f13178a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm","pattern":"[url:value = 'http://31.77.227.121/satan_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3edc06-4447-2f38-eefc-00001c17ae8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_m68k","pattern":"[url:value = 'http://31.77.227.121/satan_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd8734e-6e6e-8e9e-2bec-0000026895a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_x86_64","pattern":"[url:value = 'http://31.77.227.121/satan_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb83ff4-e4a1-cc31-807f-0000dbdf8f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips_el","pattern":"[url:value = 'http://31.77.227.121/satan_mips_el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26af26c-41f6-dee3-4515-00003e567c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm7","pattern":"[url:value = 'http://31.77.227.121/satan_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7632d6a3-09d2-7e00-9b71-000030fd95f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sparc","pattern":"[url:value = 'http://31.77.227.121/satan_sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ab503d-7780-c9df-1d38-0000237a143c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sh4","pattern":"[url:value = 'http://31.77.227.121/satan_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed971693-9401-0e96-60f7-000079d0f0da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/getit.exe","pattern":"[url:value = 'http://178.16.54.109/getit.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa446ab7-cf4d-b80a-d606-0000dac4ab65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/gg11","pattern":"[url:value = 'http://194.238.57.124:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3509753-7513-a64f-6bc7-0000cfe798cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.74.47.172:6407/linux","pattern":"[url:value = 'http://112.74.47.172:6407/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93edb27a-49c4-cb43-f91d-0000a558fa44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd3da97-0282-7145-fcef-00006827451d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mips","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d7d91b-eaac-556e-f20f-0000ac48303c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7f9faa-e178-4bae-8a4c-000016fa671f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/i","pattern":"[url:value = 'http://175.146.159.250:58407/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f18fad-9774-d262-6f5b-00005377cd55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/ChromeReal.exe","pattern":"[url:value = 'https://c2.11179669.cloud/ChromeReal.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2a2e49-2518-bb9e-0254-00005b813391","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/edgeupd.dat","pattern":"[url:value = 'https://c2.11179669.cloud/edgeupd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f95805-e87c-4138-9563-000044be1a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/bin.sh","pattern":"[url:value = 'http://88.232.49.106:60233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae844e-0cc0-1e1c-7b5f-0000e0f3364f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/bin.sh","pattern":"[url:value = 'http://27.215.210.140:47517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9faaa1d2-e1d6-e19c-12b1-0000fb646331","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/i","pattern":"[url:value = 'http://60.23.123.119:52447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6ab24c-8168-2048-b6b5-0000f66275fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/i","pattern":"[url:value = 'http://221.205.0.233:37221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5500a14b-c041-af5c-ab0e-00003fa5aa72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/i","pattern":"[url:value = 'http://27.215.210.140:47517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b099d78-7124-7c23-f233-000013a730ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/i","pattern":"[url:value = 'http://88.232.49.106:60233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af00a491-ad5b-9441-121e-0000c2ccee2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.py","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3550aa9-f502-5c30-6b2f-0000c3316e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.artleadsdigital.com/payloadencrypted.bin","pattern":"[url:value = 'https://www.artleadsdigital.com/payloadencrypted.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f741699-8758-e275-b582-00004d44c6bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.bat","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef169ca-07b7-23b7-dea6-000016cb44c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tattinamecheap.com/QuickFetch.exe","pattern":"[url:value = 'https://tattinamecheap.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c134b4a0-c533-2ea4-f45f-00008c138706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.2.164:47376/bin.sh","pattern":"[url:value = 'http://123.13.2.164:47376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df976d-3e62-0ab4-df17-00009c15ce0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/bin.sh","pattern":"[url:value = 'http://222.137.172.144:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48cb74e-7e19-7244-c146-0000c1f812b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/bin.sh","pattern":"[url:value = 'http://59.97.252.25:32934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6926b946-b4e2-ab6b-2a9c-0000676b24b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/i","pattern":"[url:value = 'http://27.215.85.41:50026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70f6e17-25a8-7012-eee1-000086deab24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88011c5e-188f-f107-fcfb-000003242b57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mpsl","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a370a82-f8dd-8b87-12a3-00005495c7bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.sh4","pattern":"[url:value = 'http://18.236.12.51/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a5a107-6950-dce6-95e2-0000e09989e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm5","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b74310-8c4d-9c00-a917-00006601dc17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f65e8d5-2dd9-aef7-c3de-0000d44b5e49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.ppc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6837a0cd-365b-6764-dcbc-00007bbb5933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86_64","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9abc02b-80dd-ec92-f4cd-00004a904168","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm7","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eacf0bd-dead-2398-066f-0000f22c260d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm6","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ffee41-4be8-c641-adcb-000068d193c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.m68k","pattern":"[url:value = 'http://18.236.12.51/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb24f42c-548e-41b0-c40c-000089f23af9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/bin.sh","pattern":"[url:value = 'http://219.157.246.145:56603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c138b81-fee0-9ec7-e08e-00004848344b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.aarch64","pattern":"[url:value = 'http://167.86.99.169/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a30dbc-5348-3cac-ac15-0000c243ce12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/i","pattern":"[url:value = 'http://59.97.252.25:32934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b377b685-a327-8ab8-a664-00006f7671d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/i","pattern":"[url:value = 'http://222.137.172.144:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d14ed9c-8658-5f98-b15c-0000f1755dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/bin.sh","pattern":"[url:value = 'http://115.49.94.7:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d982f200-6143-a7c4-72f1-0000d14a2444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/bin.sh","pattern":"[url:value = 'http://180.115.85.248:45790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7ccc34-23ae-dd56-bd6c-0000e9e8ad4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/i","pattern":"[url:value = 'http://115.49.94.7:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820b0806-afbe-bb0c-07a0-0000aff06a1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/i","pattern":"[url:value = 'http://180.115.85.248:45790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39402dbb-28ae-6630-f643-00006b8b4f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.140:55161/bin.sh","pattern":"[url:value = 'http://59.96.140.140:55161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5ccf79-8098-b2ff-4b2d-000081e9c0b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77150455-ea0f-a991-b60a-000097b0886d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/bin.sh","pattern":"[url:value = 'http://182.126.119.188:36580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d195cb-8631-a02a-9085-0000946ea091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.47.120.247:39556/i","pattern":"[url:value = 'http://58.47.120.247:39556/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--729c76a3-628e-efb1-6d8e-0000af94a7fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d18b9d5-0c1d-571a-a243-0000595f3f8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84f2db7-4485-07df-28c6-0000f22eab7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebdccba-1229-8c5f-9589-0000ee206975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6345f5-aa42-17ad-c162-00001ecc7f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94ccc25-b530-c0a0-5b0e-0000d2d554a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73650c25-c035-a624-e631-00005b9d1b0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3a0561-ca9d-799e-4edd-00000618c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7628eff0-423a-1fbc-1ff2-0000ade171d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed21ed5-59f1-4f39-c047-0000c3a83edc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd9705-4991-66ed-3b5f-00000fb115e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fe1e7b-67e5-b3e7-0683-0000229622ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe","pattern":"[url:value = 'https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b40353-5ad9-eed6-beba-00007dadf192","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fc272b-e915-de3a-ff49-0000aea0e024","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d860f36-d6a6-383c-16fa-000057d3e61b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.18:32896/bin.sh","pattern":"[url:value = 'http://120.84.213.18:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f335026-f15a-fbea-60bf-0000cddd4321","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/bin.sh","pattern":"[url:value = 'http://222.140.156.149:50285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6992eb-67e3-9fd7-43ac-000026d84b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://teakivo.com//wp-content/bin.exe","pattern":"[url:value = 'https://teakivo.com//wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0679d0e2-3439-1436-787e-0000f6f14de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/litxwnimg_082224.png","pattern":"[url:value = 'https://sunix-technology.com/images/litxwnimg_082224.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44308ea1-2a2a-ab89-7508-0000af15f7d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/MSI_PRO.png","pattern":"[url:value = 'https://sunix-technology.com/images/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7425049-b4d7-aae6-bebc-0000a9548ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/Setup.rar","pattern":"[url:value = 'https://winds11.site/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7259107-b4f4-e5e7-b5af-0000d2673c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/bin.sh","pattern":"[url:value = 'http://125.41.1.44:45185/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d410851a-e635-9335-3773-0000be841fb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/i","pattern":"[url:value = 'http://222.140.156.149:50285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793d7cd0-58a1-631a-9030-0000a21d0a0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaf3827-24d4-5e00-8669-0000988217f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cb2b60-63f9-4c55-a42a-0000c66768aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/i","pattern":"[url:value = 'http://125.41.1.44:45185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe797da-a4b3-61bf-859b-000074069eb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baileyemas.com/vlc.zip","pattern":"[url:value = 'https://baileyemas.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2e538b-c85c-01b3-3214-00005456b28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/bin.sh","pattern":"[url:value = 'http://105.184.157.90:46817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca07fb0e-5acd-569d-1dd2-000097c4c5bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/i","pattern":"[url:value = 'http://112.232.226.68:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3205ac62-bc4e-a975-aa83-0000cdfd5db8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/bin.sh","pattern":"[url:value = 'http://115.49.28.151:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cadd80-5a9f-fed6-3602-00005a64ceb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/r","pattern":"[url:value = 'http://31.77.227.102/r']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfd8af1-8d76-ec64-1fc2-00004210a275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/jaws.sh","pattern":"[url:value = 'http://31.77.227.102/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67443ed4-32a8-d6ab-5d7f-00004e8246d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dl","pattern":"[url:value = 'http://31.77.227.102/dl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09b55ba-3b89-c4bd-f94c-00009caedd05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/routerip.sh","pattern":"[url:value = 'http://31.77.227.102/routerip.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a645d6-3250-3c82-3db7-0000cfc9b1c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/j","pattern":"[url:value = 'http://31.77.227.102/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2103cd-2993-d529-5edf-00000a4503bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.128.27:34669/i","pattern":"[url:value = 'http://42.86.128.27:34669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112891cc-4cc2-d07b-cc6f-0000312c393a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59900/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852b410f-ff70-dcde-f32e-0000baf48512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/bin.sh","pattern":"[url:value = 'http://182.121.171.163:58015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e42f5df-64b2-9960-7552-000083ba02f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/bin.sh","pattern":"[url:value = 'http://60.177.244.198:55825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3ccf93-d90b-5fc1-3e79-0000682ef4cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmips","pattern":"[url:value = 'http://31.77.227.134/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb5f17-8d41-8e19-1b00-0000fa539afc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/bin.sh","pattern":"[url:value = 'http://42.58.252.41:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2debcecc-595a-a1c3-2c27-00000e62eb97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.37.102.157:50864/i","pattern":"[url:value = 'http://27.37.102.157:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e839c7f-f5c8-ec4e-a628-0000029e7d41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/bin.sh","pattern":"[url:value = 'http://66.212.173.225:35221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1f7e4-988e-35e3-3b2e-0000f0b4a84d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.31.160:24414/s/linux","pattern":"[url:value = 'http://194.59.31.160:24414/s/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724a26a3-f572-9ac2-5922-00007a9f8d4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.159.117:41888/bin.sh","pattern":"[url:value = 'http://42.239.159.117:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1074f661-dc6d-b54f-2d54-0000a8ed17b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/i","pattern":"[url:value = 'http://42.232.181.83:55625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc01f284-7d2d-0428-566b-000043c745e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.194.206:50377/bin.sh","pattern":"[url:value = 'http://60.23.194.206:50377/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f6715f-48dd-7fca-acfe-0000f16c33eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/i","pattern":"[url:value = 'http://37.78.12.145:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541b1d3d-725e-9328-2f3d-0000adcc96c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/bin.sh","pattern":"[url:value = 'http://182.245.28.97:40240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ae7fc-2e45-ab01-52e9-0000cf9e02d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://79.135.225.50:13477/.i","pattern":"[url:value = 'http://79.135.225.50:13477/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc01576-c17b-6c57-d0ed-000008db75d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/i","pattern":"[url:value = 'http://122.139.14.243:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66756c60-a639-48bf-cad0-000055862ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bash.sh","pattern":"[url:value = 'http://132.243.200.43/nullnet_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80610f18-3ee0-7b2d-2009-00005b6efae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pspc","pattern":"[url:value = 'http://31.77.227.134/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fbc277-507c-cf28-8a22-0000766ba5c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/i","pattern":"[url:value = 'http://115.60.200.162:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b7b821-00ce-1f41-ec48-0000b4e06ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcd50d0-1aa9-422d-1617-0000269193a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/bin.sh","pattern":"[url:value = 'http://39.79.195.66:54804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f10678-c178-711a-252c-00003274190d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152ec4-d44b-4730-1969-0000040a9652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.6:38860/i","pattern":"[url:value = 'http://221.15.12.6:38860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb650a14-5fba-09e1-c728-0000286e3394","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87493ec2-f8ad-e95d-9bcb-00002898e54e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3665b8bf-ab69-d9ac-3b64-00002bb04dd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.61.92.78:58321/i","pattern":"[url:value = 'http://111.61.92.78:58321/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a478f628-2123-add2-d4f9-0000de10ed67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/bin.sh","pattern":"[url:value = 'http://119.178.149.31:33483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa778e6-7790-3b0e-d236-0000f64d2c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/bin.sh","pattern":"[url:value = 'http://115.55.59.69:53574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7f3fa-8849-c9c7-3471-000076b456f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/i","pattern":"[url:value = 'http://42.232.236.105:33973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570e850c-73df-364f-1bd7-00005c20fd94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/bin.sh","pattern":"[url:value = 'http://182.121.246.143:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab677755-ae9f-89dd-570c-00002da9b294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.141.218:40057/i","pattern":"[url:value = 'http://61.53.141.218:40057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e47e0a-0d97-54e2-10ce-0000ef3ab272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/bin.sh","pattern":"[url:value = 'http://125.41.109.138:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e55a76-b58a-98f1-8d05-0000343ef255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2282222d-c36a-bf75-fc66-000060e73413","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://72.29.46.195:43633/i","pattern":"[url:value = 'http://72.29.46.195:43633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fe5034-2118-4955-0bcd-000037aa8a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/bin.sh","pattern":"[url:value = 'http://37.78.12.145:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecf4763-f49d-5b7d-02c8-00000a0436ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/bin.sh","pattern":"[url:value = 'http://125.43.106.217:44114/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44d52f-2dff-eb8f-cbe5-00004a99f0be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/parm7","pattern":"[url:value = 'http://31.77.227.134/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eab8e89-b452-f2c3-bf61-0000fe96aa2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/i","pattern":"[url:value = 'http://123.9.81.188:52368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e497e4ba-fdc7-412f-c3eb-000068c60e83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/bin.sh","pattern":"[url:value = 'http://222.139.229.134:40628/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40560bfc-2302-2e10-17b7-00002954e250","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/i","pattern":"[url:value = 'http://182.245.28.97:40240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cc9221-e315-1bee-e99d-00001c5c0f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/bin.sh","pattern":"[url:value = 'http://123.9.81.188:52368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a164e215-5a71-8584-e9e8-0000c80c10bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/bin.sh","pattern":"[url:value = 'http://115.54.162.45:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e44a53-811c-b04f-f221-0000377d5430","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/i","pattern":"[url:value = 'http://125.41.109.138:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a4d3d9-3e14-20cd-8d7c-00000d80ba89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.40.34:41510/i","pattern":"[url:value = 'http://110.136.40.34:41510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e7d40c-d32f-0d4f-fdef-00002656cb33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/i","pattern":"[url:value = 'http://115.49.73.173:58794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61541e15-b457-4c7c-dc25-000056dc8e66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/bin.sh","pattern":"[url:value = 'http://42.230.218.53:49708/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c00010a-6887-3db2-4421-0000e0faf145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/i","pattern":"[url:value = 'http://115.50.68.3:50876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cee274-5596-67d2-12af-0000b71afb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.70:35378/i","pattern":"[url:value = 'http://120.84.214.70:35378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af003e1-296c-e07d-ada8-0000cac65ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.86.128.27:34669/bin.sh","pattern":"[url:value = 'http://42.86.128.27:34669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ea38a9-3a25-20d7-98d9-0000759f948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/i","pattern":"[url:value = 'http://123.5.153.225:57640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af9c557-8389-dfcd-2330-0000ef691432","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/i","pattern":"[url:value = 'http://182.121.246.143:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a07c22-6286-49da-c2c8-00009ae3429b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/bin.sh","pattern":"[url:value = 'http://27.215.85.41:50026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85d007b-cdc9-0114-728c-0000b908ef8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/i","pattern":"[url:value = 'http://222.141.120.242:36425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e77acea-76ca-d000-5bf2-00009cd0079c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.40.180.63:47173/i","pattern":"[url:value = 'http://39.40.180.63:47173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--089c9527-2ced-449f-62a1-00003cfbb4f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680589ef-a67c-84b3-fb84-0000cce305d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01012c8f-bcd5-a9ec-11b9-00005029422a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.31.114:44907/i","pattern":"[url:value = 'http://182.113.31.114:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1e5d23-0938-bebd-8620-00003b67a3d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/bin.sh","pattern":"[url:value = 'http://42.54.8.116:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4237ef-ee55-6491-82ab-00005e1d5245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.58.130.128:38469/i","pattern":"[url:value = 'http://113.58.130.128:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef5c6ce-7260-881c-6e24-00003f3088a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.7.157.56:57185/i","pattern":"[url:value = 'http://27.7.157.56:57185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41537338-b1d9-0313-94e6-0000287edbbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/bin.sh","pattern":"[url:value = 'http://222.142.252.154:39030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3675fb05-25c3-3ee0-c1ca-0000259a3ab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/bin.sh","pattern":"[url:value = 'http://42.237.83.89:55341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54347593-6142-1da5-7c62-000078df3a55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/i","pattern":"[url:value = 'http://115.54.162.45:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8227b141-75d6-1082-517c-0000ddfa8849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pppc","pattern":"[url:value = 'http://31.77.227.134/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85397897-9086-7942-3dca-0000b4c990a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/i","pattern":"[url:value = 'http://42.237.83.89:55341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3f4552-b90b-3572-8690-0000a02629b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--237dfcad-182d-1da8-c27f-0000b36b288e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/i","pattern":"[url:value = 'http://60.18.84.125:39736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86da3ba-a0ea-aef2-ca03-00008a96cc7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/syss","pattern":"[url:value = 'http://61.184.10.103/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7755316-7c7c-b4c9-1784-00005d2411bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/psh4","pattern":"[url:value = 'http://31.77.227.134/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243614e8-6970-4cb1-9d83-0000b293865e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afb8855-f0f0-38ae-cdee-000047349028","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.153.54:53457/i","pattern":"[url:value = 'http://222.137.153.54:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b0eb23-fa80-063b-1156-0000b896249c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/i","pattern":"[url:value = 'http://222.142.252.154:39030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d6415e-f604-d3f0-b737-000014864f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/i","pattern":"[url:value = 'http://115.49.28.151:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3d3571-b314-75e2-c939-00005b1cc9b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/amd","pattern":"[url:value = 'http://61.184.10.103/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6513e4-d961-94f5-d2d0-000006aae9fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65397701-b15d-fef4-205c-0000cacf48c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/bin.sh","pattern":"[url:value = 'http://117.146.92.46:56049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3511194d-4119-cddc-6a67-00007d84d2e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/bin.sh","pattern":"[url:value = 'http://222.141.120.242:36425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f3ff3c-1a35-e5a3-2cbf-00006e970706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/bin.sh","pattern":"[url:value = 'http://42.232.181.83:55625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53c3b1-af0f-0182-f635-0000225f55c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/bin.sh","pattern":"[url:value = 'http://210.208.110.130:49996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c5b898-7425-8de0-a288-0000c064beac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/i","pattern":"[url:value = 'http://125.43.106.217:44114/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6215f19-a984-d342-c622-000096cb8c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:43450/i","pattern":"[url:value = 'http://196.189.130.28:43450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61963dac-1fb7-a71a-c4a0-000057909f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/i","pattern":"[url:value = 'http://119.178.149.31:33483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d65a194-aa0b-5125-f567-000084a84d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/i","pattern":"[url:value = 'http://61.137.198.130:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b3c650-9799-5e6c-7107-00005702f971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.238.108.90:47368/i","pattern":"[url:value = 'http://112.238.108.90:47368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5331247e-d267-ad7c-192c-00000a2fe13b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8610fb45-3d8a-a9da-bd99-000068d82211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pm68k","pattern":"[url:value = 'http://31.77.227.134/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e804b92d-acd2-f482-2df2-0000f689411d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/i","pattern":"[url:value = 'http://42.87.111.88:33491/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ca5344-3104-1494-e8c2-000069c24529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/bin.sh","pattern":"[url:value = 'http://182.113.33.72:34879/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329bf80b-bbff-57b1-39b5-0000439b8b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee095a-dc55-071a-f1bc-0000032d9a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.134/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b095e86e-215c-b8d9-0bd9-0000a0fdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/bin.sh","pattern":"[url:value = 'http://115.60.200.162:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a5f273d-31b8-7383-5e2d-0000f9d4cd67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/i","pattern":"[url:value = 'http://39.79.195.66:54804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68021fa4-3d77-468c-8d8d-00000953dfc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/i","pattern":"[url:value = 'http://125.43.38.255:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47daf53-f7c0-ddde-f3e8-00009da77814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/bin.sh","pattern":"[url:value = 'http://120.28.194.30:35812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597aeb1a-992d-11c0-cab0-0000e89dd154","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/i","pattern":"[url:value = 'http://115.55.59.69:53574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311d889c-ac0f-20ca-7948-000090237a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.29.39.213:56148/i","pattern":"[url:value = 'http://78.29.39.213:56148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7107359-48d4-fa7e-c72d-00008ebe6a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/bin.sh","pattern":"[url:value = 'http://115.50.68.3:50876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff8f7a9-bd47-fcb0-74bb-0000ca442e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/i","pattern":"[url:value = 'http://42.54.8.116:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e72c9b4-44e0-48da-972c-000092126f2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/i","pattern":"[url:value = 'http://202.163.107.242:56229/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8103f53f-cc34-4fe7-d119-00002b83a3c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/i","pattern":"[url:value = 'http://222.137.105.253:46499/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ad86a6-a300-091a-8f01-0000ec3d84a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.71.0.131:9935/linux","pattern":"[url:value = 'http://120.71.0.131:9935/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2481e4f6-96d1-a614-854f-0000e592cfb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/bin.sh","pattern":"[url:value = 'http://222.137.105.253:46499/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52596464-705e-63d0-838f-0000a88e61f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30da26d2-4531-798b-5199-0000dfa31c2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.242.40:51278/i","pattern":"[url:value = 'http://182.126.242.40:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8441bfa2-3fbf-6fcf-c048-00004c0c0f55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.159.98.16/daemonc","pattern":"[url:value = 'http://94.159.98.16/daemonc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636f0ead-ea33-9441-f144-00006658dab9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.34.84:34056/i","pattern":"[url:value = 'http://60.17.34.84:34056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35fc90f-f59d-8525-b44b-00001ec62232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.107.97:43395/bin.sh","pattern":"[url:value = 'http://61.53.107.97:43395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdd4c2f-45ad-2b86-8e5c-000063c9eaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/bin.sh","pattern":"[url:value = 'http://123.5.153.225:57640/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d09c6d4-cd2f-26bc-6c7b-00009a8a1073","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/i","pattern":"[url:value = 'http://123.190.17.0:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4381cb14-4b6b-9f35-a508-00005de8f372","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/bin.sh","pattern":"[url:value = 'http://42.59.204.16:37885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddd3ee3-e090-a965-d4d1-0000e6759ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ddb00a-32ed-a8bc-8b97-0000e546c0f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d27d773-08b1-cb59-c6da-0000c9b27549","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/bin.sh","pattern":"[url:value = 'http://66.8.135.142:41648/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bf48bf-86b7-0e6f-4c9e-0000590a97c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/i","pattern":"[url:value = 'http://105.184.157.90:46817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec31238-763e-d351-0015-0000a4971271","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/i","pattern":"[url:value = 'http://117.146.92.46:56049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb6cae8-0fa7-c0a1-3c37-00004090ed80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/bin.sh","pattern":"[url:value = 'http://221.15.253.184:44790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1f3eca-4713-db37-9451-0000a483401f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/bin.sh","pattern":"[url:value = 'http://221.15.11.240:40642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024707cd-9308-7328-60a2-0000caf8024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/i","pattern":"[url:value = 'http://66.8.135.142:41648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8b1954-5646-98de-633f-00007ea930e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/bin.sh","pattern":"[url:value = 'http://114.221.254.230:54765/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e89bf4-18be-f51b-c322-00007adfa751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/i","pattern":"[url:value = 'http://221.15.253.184:44790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bed72c-c8c9-e2da-d6de-00002781374e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.191:50908/i","pattern":"[url:value = 'http://115.48.144.191:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f321138e-5b5a-9310-e8a9-0000325b221b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/bin.sh","pattern":"[url:value = 'http://123.7.241.28:50935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92948ddd-573a-c96b-b67e-000008685204","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.27.152:52881/i","pattern":"[url:value = 'http://105.184.27.152:52881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006ac580-7065-0c4e-e00e-00000ea9f563","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/bin.sh","pattern":"[url:value = 'http://182.240.9.116:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5960819f-5ea0-bb87-ec35-00006d137268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/bin.sh","pattern":"[url:value = 'http://115.55.10.180:53804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adef1928-5cdd-1a3e-c561-0000699d04aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/i","pattern":"[url:value = 'http://123.7.241.28:50935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504fd149-0d2e-01e8-b02d-0000f57d5bee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.173.11:52595/i","pattern":"[url:value = 'http://42.224.173.11:52595/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3191bf0-c9b5-eee0-1425-00008cef55e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/bin.sh","pattern":"[url:value = 'http://115.59.34.198:49461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522e4b8a-5cef-523b-5f20-0000d78f40ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/i","pattern":"[url:value = 'http://114.221.254.230:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f576b9a-8b05-1b58-2636-000077f40efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/bin.sh","pattern":"[url:value = 'http://115.56.174.13:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d132bf-3b8d-2e18-b20a-000026d04ab5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/i","pattern":"[url:value = 'http://221.15.11.240:40642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637d56f1-ddb2-5000-045f-00008225ab79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b66d39-3223-82e7-b3c9-00002d9d9815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a42f-29dd-001c-b640-0000b3072d8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/i","pattern":"[url:value = 'http://115.55.10.180:53804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceeb38-4ebb-652e-564b-00001f58343a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.94:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb30c5df-3799-12b7-b7f4-0000e2f724ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/bin.sh","pattern":"[url:value = 'http://175.148.157.224:54842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3221481e-0090-a446-c477-000096071eb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/i","pattern":"[url:value = 'http://115.59.34.198:49461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c30d0f-af6d-6bbf-2631-000048e9ef30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/i","pattern":"[url:value = 'http://115.56.174.13:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b8e631-a842-064c-cac2-00001c41a5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.143.200:56878/i","pattern":"[url:value = 'http://59.96.143.200:56878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1289704e-b8b8-c82d-34fe-00003529a704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/bin.sh","pattern":"[url:value = 'http://125.42.27.234:57981/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad7fc21-ce5e-f9e0-07a8-00006d478025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/bin.sh","pattern":"[url:value = 'http://115.55.193.225:54553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb63466-84da-ee76-b6c2-0000210417fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.143.40:35243/i","pattern":"[url:value = 'http://115.48.143.40:35243/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cd897a-0497-c510-956b-0000a2843597","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.203:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.203:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf6b408-28bb-0df7-93c4-00002e12280f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/i","pattern":"[url:value = 'http://125.42.27.234:57981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4016593f-3d97-6c4d-5260-000044ecb40f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/i","pattern":"[url:value = 'http://175.148.157.224:54842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c35056-fdca-e927-8b87-00002491d9d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat","pattern":"[url:value = 'https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a896049-e67a-1876-a380-00007aa4a398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dfc8e2-6fbd-5c79-8d8e-00004b5fd33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/i","pattern":"[url:value = 'http://115.55.193.225:54553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea46145-6986-c5d3-d4ce-00002f7a376c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/bin.sh","pattern":"[url:value = 'http://116.55.72.18:38032/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f6ff70-719c-0352-11bd-0000677d87d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.76.176:57084/i","pattern":"[url:value = 'http://222.139.76.176:57084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6122b0-dc9e-50fc-e1e2-0000ac2fac0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/i","pattern":"[url:value = 'http://182.121.171.163:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0bb8e0-0451-b138-af3c-0000e65a6819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/bin.sh","pattern":"[url:value = 'http://42.232.236.105:33973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8d896b-8b61-1fc1-ace5-0000c9bcbded","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/i","pattern":"[url:value = 'http://116.55.72.18:38032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7fe02-a0cc-b187-28de-000043a32a7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/bin.sh","pattern":"[url:value = 'http://60.17.83.99:51270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e8c252-fc19-4310-7e04-0000cc536055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/bin.sh","pattern":"[url:value = 'http://79.106.74.167:44091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8dcbe-ae9c-046f-8b19-00009e3346b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/bin.sh","pattern":"[url:value = 'http://219.155.12.214:51034/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724bd93e-b38d-d0ed-26c7-00006b776b08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.227/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66847f31-1123-f2cf-fd26-000093ade86f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d979727-70e2-5eb7-3d03-0000991f0f6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/bin/support.client.exe","pattern":"[url:value = 'http://178.16.52.133/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8f378c-ce85-b2bd-cee3-0000f1599954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330fdd3e-382a-19fa-7fdb-00007eaa2bc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.ppc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca3059a-d5a0-dc2b-642d-0000365a7e43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.i686","pattern":"[url:value = 'http://176.65.139.133/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe54d9b-360f-8180-89e5-0000908735bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mpsl","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c644f166-ef05-60e2-04d1-0000c43aa78f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/debug","pattern":"[url:value = 'http://176.65.139.133/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d6d540-4d3f-b37d-c75c-000017138e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86_64","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebdecf0-db11-4893-ef24-000006a945b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a378b52-9d09-bee0-7b47-0000fb845bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mips","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3041f0c2-1fbb-ca75-31a4-0000733a970b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm5","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4f91ee-3151-17f4-c496-0000d9335f80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm7","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdd76fb-d54a-7494-7180-0000cce0a99a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb655bfc-a002-f254-125b-00002c3fdea9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b842f81-20b6-059a-0752-0000ec484b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz.sh","pattern":"[url:value = 'http://176.65.139.133/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465d3f69-03bc-9680-c3bc-0000fe74b232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.sh4","pattern":"[url:value = 'http://176.65.139.133/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31496367-bc7c-87b0-7120-0000f83e596a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.spc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461bbf84-428d-07c7-3685-0000fb728d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.m68k","pattern":"[url:value = 'http://176.65.139.133/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a948a178-8037-b52e-5942-0000618f38e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm6","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930715e3-2d8f-af07-2168-0000f6035873","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a35456-f8b0-8602-cc47-00000d4f7db7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.64/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ea9738-e0ce-098f-5c93-0000a0d1e634","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/i","pattern":"[url:value = 'http://60.17.83.99:51270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6e4dd8-3567-e939-4471-000098315cda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.172/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ed5670-f116-1f30-6f90-000092dd4970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a55d54-e739-69bc-78fe-0000366ab7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8f910c-c901-3993-32dc-0000e831998c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d30629da-c95a-842e-ab6e-0000d94dcf45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.23/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.23/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609c563b-0c6a-d7c6-bd52-0000c9106a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de06326-dfd4-2226-c429-0000266ca58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8133118018/7hc0ffr.exe","pattern":"[url:value = 'http://62.60.226.140/files/8133118018/7hc0ffr.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c922b-694e-2a30-3a9d-00007aa0db81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca1780c4-dfa4-8edc-b707-0000da806674","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/bin/support.client.exe","pattern":"[url:value = 'https://84.200.80.106/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee6d224-a7f4-59b0-49ca-000031554bdc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/bin/support.client.exe","pattern":"[url:value = 'https://79.133.57.37/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a94d1c-23fe-0226-3093-00000b9735ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38aa0258-30d2-5575-7b82-000092ec12ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R6.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c77807-0e7d-e1b6-3152-000013dff79e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9bf3-9c33-c85f-a31a-0000e02f5556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ca2be8-fd42-2df9-788f-00005e461274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31243ead-95b1-3bc3-85a4-000058107400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9c3940-eec5-7ac3-437d-000073d19a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.65.215:34323/i","pattern":"[url:value = 'http://42.54.65.215:34323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb6c649-cf48-36de-5abc-0000349f95bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.29.33.253:58457/i","pattern":"[url:value = 'http://27.29.33.253:58457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07b9b21-b062-7bbb-d980-0000989b92ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b020a23b-6b44-9d9c-4269-00007b17b1cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0a0a13-e411-b41e-c2b8-0000f02c598f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f92835-f9bd-60c3-7484-00004fea86e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd845a7f-5377-6344-cb7c-0000015a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fddcb8-acce-ada8-4bd3-0000d1baeefd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6537684c-6897-d199-4df0-0000986f75cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a883181-d32c-d285-cde4-000031bf38b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/bin/support.client.exe","pattern":"[url:value = 'https://192.142.53.225/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703d0d59-cb84-021b-ba82-00007add62bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea5f9d7-6843-3939-5a6f-00001f726b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/i","pattern":"[url:value = 'http://219.155.12.214:51034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b38426f-ceb2-9a43-3155-00005db05cb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.58.56.49/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://2.58.56.49/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5eb7139-1c0e-b882-15c2-0000de30e843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/bin.sh","pattern":"[url:value = 'http://125.43.38.255:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a769c912-1be7-f655-e0dc-0000c58287ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/bin.sh","pattern":"[url:value = 'http://42.224.121.161:40429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68bd94a-a22d-1d9a-c9fe-0000a3eb69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:55397/i","pattern":"[url:value = 'http://156.146.26.225:55397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb8a37a-a20c-b790-85b5-0000ed807ce0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/i","pattern":"[url:value = 'http://42.224.121.161:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cc9317-e571-b46b-7d2a-000025a1a720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/bin.sh","pattern":"[url:value = 'http://222.141.22.9:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a51b53a-808f-5a41-4b59-000058541eed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/i","pattern":"[url:value = 'http://60.217.123.198:46902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94b0902-002e-8952-afee-0000c73eb268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://scuttlepopdownload.monster","pattern":"[url:value = 'http://scuttlepopdownload.monster']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4397433f-a517-2ac8-3561-00006e7efd61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://daleeby.com/R4JnneaiZebrwCkgG","pattern":"[url:value = 'https://daleeby.com/R4JnneaiZebrwCkgG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14527404-4000-05a3-00d3-00003d49614c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.101/Servicer.apk","pattern":"[url:value = 'http://77.239.124.101/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b125c32-949d-c0f9-f130-0000362e170b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat","pattern":"[url:value = 'https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4a3153-d883-01f7-c80d-0000cad87a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mpsl","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382b4f69-7bbd-1123-5c99-0000682d1fb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be0ed26-bf04-af92-9ae6-0000836c10ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm7","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f1d27a-32f0-ee34-ebed-0000d4a4cdc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/ven9392.exe","pattern":"[url:value = 'https://62.60.226.185/ven9392.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24b3b87-1dcf-17c3-dcfb-0000cdb03f49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/s0907.exe","pattern":"[url:value = 'https://62.60.226.185/s0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62a564e-3109-c8c5-8d68-0000b928d6c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/t0907.exe","pattern":"[url:value = 'https://62.60.226.185/t0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ee8c0a-5383-ff0c-af63-00002965d825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm5","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce7ddb0-e182-8c61-0cf7-00003bd077cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm6","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e70b47-e76d-a86d-0651-00005c39704f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd2af5e-9a45-60bb-c98f-0000d3165561","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b4c34c-65fa-c900-3734-0000a12dc201","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.m68k","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513fbc4b-39fb-db43-73fd-000076afeb57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5a9cba-850d-fae6-55a7-00006af543e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99553a89-def9-c66f-1c61-0000243a1e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec07d8de-4806-29e3-c5ea-0000a4e487cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.sh4","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f98f79a-53aa-6f44-5658-0000a1db14db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43269882-4f50-0483-ad89-00007d520fec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.s390x","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e186d99-5110-014e-0954-0000c58b4b23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat","pattern":"[url:value = 'https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a047b2ec-0340-7c93-e15f-00006ac574c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://wer-ldr.duckdns.org/b.sh","pattern":"[url:value = 'http://wer-ldr.duckdns.org/b.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9846e0be-041f-96c7-2143-0000fa778165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86_64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1384d0-c38c-507d-a751-0000a2ae6c94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.spc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a454d4a-53fc-b842-68c7-0000ca1ac9b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/bin.sh","pattern":"[url:value = 'http://115.49.7.198:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538d9b3c-dcb4-15ff-54a3-0000d8bbf545","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://verifyidentify.com/check","pattern":"[url:value = 'https://verifyidentify.com/check']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66995323-a807-01c6-dbdb-0000d6389806","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://akb.cat/N330","pattern":"[url:value = 'http://akb.cat/N330']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3e11af-3b9a-010e-4b57-0000b4ea6142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/bin.sh","pattern":"[url:value = 'http://210.208.110.42:56390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877789d3-6ed9-88d4-8dbc-00005f9909dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.68.231:52921/i","pattern":"[url:value = 'http://123.11.68.231:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a56d3aa-e7c4-f8a5-161f-00000884ff0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/i","pattern":"[url:value = 'http://210.208.110.42:56390/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8a76a1-70c0-86b7-3304-000058c4c65b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/bin.sh","pattern":"[url:value = 'http://182.127.115.109:39219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39889fc2-212f-15ac-bc07-000073e79a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.justturtle.com/indie.exe","pattern":"[url:value = 'http://www.justturtle.com/indie.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864802da-cb46-a048-c42c-00003e595eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/i","pattern":"[url:value = 'http://182.127.115.109:39219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7a1fee-10a0-913b-798f-00002a802ef5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/bin.sh","pattern":"[url:value = 'http://119.185.241.8:42488/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51ab281-3f5d-7777-d9ac-00003f10018c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/i","pattern":"[url:value = 'http://58.255.41.239:39378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e18902-2c61-d0e6-c5a6-0000cabe605e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977f368b-abeb-7ded-a3d1-000050b04c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1e267d-ca56-f3f3-f87e-0000918e0080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b173f144-97ac-44a7-ad1a-0000474e9079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/bin.sh","pattern":"[url:value = 'http://125.40.68.15:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10793c01-9927-6ec9-19f9-0000af9e9fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6b2b9d-b9df-c5cf-9c01-0000adad2b1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51f6cc55-9d70-657d-e94b-0000ad9066cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c4b243-3f30-7216-4bbe-0000cc50bcd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.148.3/70/img_222651.png","pattern":"[url:value = 'http://23.94.148.3/70/img_222651.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b5097-a17f-04bc-840b-00004a283e95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pic.li/images/MSI_PRO_Last.jpeg","pattern":"[url:value = 'https://pic.li/images/MSI_PRO_Last.jpeg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f160ce46-4bea-dd63-0906-000098aa2fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/upd","pattern":"[url:value = 'http://103.229.53.84:8443/upd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcd8c9f-bab6-e479-5301-000070dad3b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/update.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0428d26e-d256-10ca-a0d0-00003084ace7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/dll","pattern":"[url:value = 'http://103.229.53.84:8443/dll']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c376189-21de-1e77-850b-0000dec99a04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/r.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/r.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3547e754-7915-5319-860d-0000664472ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/run.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/run.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a763c74a-7f57-0632-3f6c-0000d97b3c74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/enc","pattern":"[url:value = 'http://103.229.53.84:8443/enc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afda0505-b855-8b0a-6ce2-0000e9cc4865","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/package.zip","pattern":"[url:value = 'http://103.229.53.84:8443/package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71592d6-7db8-ee42-2653-000053d80088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/chromelevator_x64.exe","pattern":"[url:value = 'http://103.229.53.84:8443/chromelevator_x64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ad1c4-83d7-9933-649b-00004a231786","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/data","pattern":"[url:value = 'http://103.229.53.84:8443/data']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93dc3bb5-061c-2459-0b4d-000084340801","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/bin","pattern":"[url:value = 'http://103.229.53.84:8443/bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e427c3a-64bd-02f0-8243-0000c6d233a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/i","pattern":"[url:value = 'http://125.40.68.15:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b7b338-0025-c728-c8b0-000044e32a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/config.bin","pattern":"[url:value = 'http://196.251.107.186/zs/config.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152da76b-39a9-468e-3287-0000146d1721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/uniform_4.44_INSTALL.exe","pattern":"[url:value = 'http://196.251.107.186/uniform_4.44_INSTALL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6614f2-c6ec-98f1-6a5e-0000c849f1f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clpr6.exe","pattern":"[url:value = 'http://196.251.107.186/clpr6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be063531-38f6-a1d9-5373-00009a8dad34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e519e23-6368-f972-c5f2-00003dd37b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta","pattern":"[url:value = 'https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e122262f-c0c8-bb8d-e13d-0000d1d98652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://one-graup.com/LUI.hta","pattern":"[url:value = 'https://one-graup.com/LUI.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1698b0a3-451d-1339-f8b1-00003559134f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4227670f-bebb-93e3-852e-0000709c4ada","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/i","pattern":"[url:value = 'http://119.185.241.8:42488/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409532a8-8320-d75f-3c46-00004e087a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/bin.sh","pattern":"[url:value = 'http://58.255.41.239:39378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7d41e5-8d59-baff-3e3d-00009c8924ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/bin.sh","pattern":"[url:value = 'http://42.231.190.213:48304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabedb4a-4a67-c43d-6819-0000c76ecf1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.182.97.242:3654/i","pattern":"[url:value = 'http://163.182.97.242:3654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c804b24-9a01-839f-de62-00003507be00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/i","pattern":"[url:value = 'http://42.231.190.213:48304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1f283f-7785-d1fe-6ff5-00000b144460","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.26.85:51916/i","pattern":"[url:value = 'http://42.5.26.85:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1c19c4-d745-13f0-7392-0000edd18e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/bin.sh","pattern":"[url:value = 'http://182.123.210.94:55730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1ae60-f2b6-6bae-2e50-00007df1fd0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/bin.sh","pattern":"[url:value = 'http://27.37.229.46:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce792ca-a9b3-20d1-893d-00001557c977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.218.95:36712/i","pattern":"[url:value = 'http://42.231.218.95:36712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e746faf4-70be-6cee-22c9-0000375773d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/i","pattern":"[url:value = 'http://27.37.229.46:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c185077d-a2fc-7062-edb6-00007acc5f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/i","pattern":"[url:value = 'http://182.123.210.94:55730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb31b5-6dd8-0438-ebb7-0000c66645d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://154.90.70.52/xmrig.sh","pattern":"[url:value = 'http://154.90.70.52/xmrig.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117caa21-52fc-9307-d698-0000c0a2001c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/bin.sh","pattern":"[url:value = 'http://122.241.88.111:37163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dff80cf-a984-838d-d198-00007804e368","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/i","pattern":"[url:value = 'http://222.138.103.241:51367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4b4a2-c424-8181-5e9e-00007f98c067","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/i","pattern":"[url:value = 'http://122.241.88.111:37163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb3b9f8-43c6-4c94-a4ac-000028ce905a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://firstratezim.com/Updater.exe","pattern":"[url:value = 'https://firstratezim.com/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef9d0e-9871-7e12-5e0e-00000ab26362","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/bin.sh","pattern":"[url:value = 'http://222.140.197.114:37580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94321eb4-6df9-fab3-ee36-00002ab77da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325592.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c403346-326b-99f2-89bc-000002d69050","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/bin.sh","pattern":"[url:value = 'http://42.224.81.6:39508/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2bfad8-797c-f8f5-8d0f-00003503d1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/i","pattern":"[url:value = 'http://222.140.197.114:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65df087-621c-eee9-8149-0000116a8499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mipsel","pattern":"[url:value = 'http://31.58.171.194/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d60e3b-668e-d28d-140b-00002d7b1522","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mips","pattern":"[url:value = 'http://31.58.171.194/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889cdbb2-c9ce-72be-7b21-0000a9d9ace3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/bin.sh","pattern":"[url:value = 'http://42.238.169.48:54614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056549fc-4135-508c-388c-000054cbae84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/bin.sh","pattern":"[url:value = 'http://103.249.199.3:45299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92acc6-b3a3-1d21-aa7d-00007de7aeeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/i","pattern":"[url:value = 'http://42.224.81.6:39508/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586f5e2c-3e7e-3ef2-25b3-00003c14f661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/i","pattern":"[url:value = 'http://42.238.169.48:54614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac95b69d-fe59-96eb-909c-000033470054","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/bin.sh","pattern":"[url:value = 'http://123.12.46.19:42170/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e7c76f-4ba7-9c3b-8638-00000d28ff56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/bin.sh","pattern":"[url:value = 'http://101.108.7.49:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f05425a-1f7a-c6fa-628a-0000277837bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.59.126:36050/bin.sh","pattern":"[url:value = 'http://119.114.59.126:36050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691c192b-ab76-8542-6b9a-00004f6f1991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/i","pattern":"[url:value = 'http://123.12.46.19:42170/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086743b1-23c3-07c5-da48-0000386839bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/bin.sh","pattern":"[url:value = 'http://42.230.45.47:55198/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034aab2-9563-8537-86d9-000047f0cf16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/i","pattern":"[url:value = 'http://101.108.7.49:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b032b6-ed92-4198-a848-000013b42037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.233.205.151:33594/bin.sh","pattern":"[url:value = 'http://121.233.205.151:33594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3ae0b8-686f-6cbe-e8ae-0000a749c066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/i","pattern":"[url:value = 'http://42.230.45.47:55198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2307ea-c355-efd7-5cde-0000bd25f7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.35:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1ddea7-dc78-7ac1-d733-000054fc8a59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.233.205.151:33594/i","pattern":"[url:value = 'http://121.233.205.151:33594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a075ab-36ad-af57-3c3f-0000a5c5d9dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm5","pattern":"[url:value = 'http://31.58.171.194/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3beae0-9a11-61bc-b2d6-0000480e67a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86_64","pattern":"[url:value = 'http://31.58.171.194/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1839b2-8b2c-f29f-9257-00002f447a11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86","pattern":"[url:value = 'http://31.58.171.194/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feebd9f-6930-6453-1732-000014e0a596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/bbc","pattern":"[url:value = 'http://31.58.171.194/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ae1487-86b5-7c91-56e1-00000fcc1157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm7","pattern":"[url:value = 'http://31.58.171.194/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa7453d-2ee5-90c9-66eb-00001d79beb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm4","pattern":"[url:value = 'http://31.58.171.194/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a92411-4135-cce5-2490-0000b7707632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm6","pattern":"[url:value = 'http://31.58.171.194/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbfb6f4-bc1f-e661-f2bb-0000affa391c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_powerpc","pattern":"[url:value = 'http://31.58.171.194/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90a9a20-ca3f-6ce8-466f-0000a7408809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_aarch64","pattern":"[url:value = 'http://31.58.171.194/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd2612-b95a-67e3-b7a4-00009dda7e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/bin.sh","pattern":"[url:value = 'http://123.172.77.129:45661/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12bc1103-3c3c-027d-51f0-0000673e2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/i","pattern":"[url:value = 'http://115.48.163.35:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee34d402-6ce7-fff8-fa81-000033126580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/bin.sh","pattern":"[url:value = 'http://219.157.249.227:40515/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef636be-70a2-bba0-16fd-0000e67450e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/bin.sh","pattern":"[url:value = 'http://103.31.103.204:55940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21036bef-c64c-2ab6-250a-000049c831c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/bin.sh","pattern":"[url:value = 'http://42.224.151.118:35018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d589c57c-26a5-a4dd-2b6f-00008b74ccc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/bin.sh","pattern":"[url:value = 'http://115.57.121.48:46211/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd0bc67-61ac-56e6-5a32-0000774dabb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/i","pattern":"[url:value = 'http://103.249.199.3:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dc9145-fb67-5aec-752c-000065182f17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/i","pattern":"[url:value = 'http://103.31.103.204:55940/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049768bc-1f75-cd5e-1782-0000fb7da596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/i","pattern":"[url:value = 'http://42.224.151.118:35018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06951339-93eb-60a1-8482-00003e46bdee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/i","pattern":"[url:value = 'http://115.57.121.48:46211/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701f26dc-645b-9197-a2ae-00003e33075b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:33484/i","pattern":"[url:value = 'http://83.219.1.198:33484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cfe93d-dc06-30f2-658d-00005ca2a428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/bin.sh","pattern":"[url:value = 'http://182.116.11.55:53485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19008a68-0246-2bc2-b396-000073deafee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.186.126.198:55528/i","pattern":"[url:value = 'http://60.186.126.198:55528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d7d846-efe1-332f-f0bc-0000d137bce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/gg11","pattern":"[url:value = 'http://191.44.114.243:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cddd5f9-df52-fc22-4bfa-00004a4e925e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/bin.sh","pattern":"[url:value = 'http://222.141.132.237:60298/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fff88a9-98a3-b119-5fdf-0000fc87de00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/i","pattern":"[url:value = 'http://182.116.11.55:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04126e7a-6963-65e8-730f-0000a5d79f4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.145.210:44835/i","pattern":"[url:value = 'http://27.44.145.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fdc2c0-5270-5fb0-cb73-00005f19e8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.10.6:39981/i","pattern":"[url:value = 'http://115.48.10.6:39981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e13fd2-6575-f747-32ff-0000f5a85ca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/.bash_history","pattern":"[url:value = 'http://191.44.114.243:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33ffbc1-bd0d-d9a7-f404-00002535ac31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.165:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fd55a-c9b5-674d-b521-0000df74f295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/bin.sh","pattern":"[url:value = 'http://180.190.189.204:53404/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7ced69-d6c2-b0a9-4084-00000113054c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://connectmagazineads.com/CarbonCopyCloner7.dmg","pattern":"[url:value = 'https://connectmagazineads.com/CarbonCopyCloner7.dmg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8c5b39-4918-effd-9dff-0000628dd0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe","pattern":"[url:value = 'https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3432781-5fa8-ed4e-753c-000021919695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/8089/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/8089/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87576957-bbc1-79cc-9580-0000dcb569a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/sike/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/sike/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83716315-be4b-2349-6a1d-000087495d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/35/eas/niceworking.vbe","pattern":"[url:value = 'https://217.154.188.255/35/eas/niceworking.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3361ce49-b65d-0eed-242d-0000e4f158dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe","pattern":"[url:value = 'https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001f91d0-0a17-88db-d073-00009cadc630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta","pattern":"[url:value = 'https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0fa07b-7c81-f1b8-c93b-0000926a63f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/p/cgnty_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/p/cgnty_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f1e226-54c5-5a34-5b2f-00006e442cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/bin.sh","pattern":"[url:value = 'http://116.2.53.55:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a610df9-84cf-5978-b298-0000c1782228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/r843.exe","pattern":"[url:value = 'https://62.60.226.185/r843.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f596f1d4-c329-d9ae-6f27-00006a3d3e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta","pattern":"[url:value = 'https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd9daea-392c-1995-a3e4-0000d4db5730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/kaze.exe","pattern":"[url:value = 'https://62.60.226.185/kaze.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6643fac-b641-721e-7763-000036156e61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta","pattern":"[url:value = 'https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188bfa63-c231-02c9-b3ac-00002ade6350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk","pattern":"[url:value = 'https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3b005-61d9-aaa0-f5ab-00004410cbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'https://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598f8632-cbe6-fea8-4604-0000c347d575","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.95.62/ph/velogs.exe","pattern":"[url:value = 'https://172.245.95.62/ph/velogs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86039b7-8dbb-e19e-0468-000077514161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'https://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce5daa2-4f21-b2e0-49f9-0000853df77e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js","pattern":"[url:value = 'https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223f0d52-13bf-8f79-658e-00009886ec22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/63748/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/63748/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86deecee-a20b-07d3-a540-0000c4aafbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/29039/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/29039/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c960dd-7778-2712-de81-0000f662f2b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/09890/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/09890/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2870e0eb-109c-f374-607a-00005fbaf817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js","pattern":"[url:value = 'https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6303bf-8eb3-43b0-71f3-0000c5e29f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/bin.sh","pattern":"[url:value = 'http://112.198.239.2:34176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3728c6-c5b7-77ca-1569-000084b4a437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/v/client_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/v/client_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278be35-ace3-eee9-439c-0000f24e187f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.195.219/ty/load.bat","pattern":"[url:value = 'https://217.60.195.219/ty/load.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240c523a-1d2a-0062-28f9-00005cb15631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.195.219/ty/s.bat","pattern":"[url:value = 'http://217.60.195.219/ty/s.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156c377e-7eeb-2469-0486-00007e1a8da6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/spxploy.vbs","pattern":"[url:value = 'https://baoxissde.one/S/spxploy.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caff75d9-4c4e-7196-8351-0000096429e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0e8e21-7da3-dc53-5cd3-00008f41f144","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tantralegacy.com/Client/battlebot.exe","pattern":"[url:value = 'https://tantralegacy.com/Client/battlebot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea065319-bfb2-e57e-1046-00009f747619","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/go_b3.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/go_b3.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99238564-c694-c230-aa66-00005f3b3bb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://itsmystik.com/dl/deadlock/Loader.exe","pattern":"[url:value = 'https://itsmystik.com/dl/deadlock/Loader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604653a-570f-fd9a-25ac-0000c26d7e35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi","pattern":"[url:value = 'https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278e7c4-848b-e7d3-ecd7-00002d31e785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://94.26.90.90/client.exe","pattern":"[url:value = 'https://94.26.90.90/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8d30ef-cd52-98a6-d672-00001a871b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi","pattern":"[url:value = 'https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24937ac2-b223-f53f-19f4-0000da8b5426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/sp.zip","pattern":"[url:value = 'https://baoxissde.one/S/sp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fc2456-56f2-40d3-29c9-0000d9a448ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://xxpro.dev/BAC_PC%E5%A3%B3.exe","pattern":"[url:value = 'https://xxpro.dev/BAC_PC%E5%A3%B3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ab77df-dc18-449e-4280-000053d9a2b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe","pattern":"[url:value = 'https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755a6932-414b-abd7-b977-0000ec181c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d226d631-7e35-8e33-3927-0000d4b02dbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9895d4-0142-1ffd-2802-00008c14bd87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac501e0a-a364-b1bf-3fc7-000046cbaeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.97.56.196/Services.apk","pattern":"[url:value = 'http://38.97.56.196/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db7accd-09dd-05cf-f8f7-00003ab6952a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/Services.apk","pattern":"[url:value = 'http://176.65.139.139/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2bcc8a-380c-1e3c-1f6d-0000d327ba24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c540b52d-7287-5120-6ce5-00002b8d8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.221.93.40/Servicer.apk","pattern":"[url:value = 'http://37.221.93.40/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab17141-7ffe-a98c-4e0d-00000f6c691e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a93d6-34cc-e969-2bd1-0000b1177d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.196:8080/api/v1/install","pattern":"[url:value = 'http://94.154.43.196:8080/api/v1/install']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d3aa77-51d6-c3ac-9152-0000eefaec6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm4","pattern":"[url:value = 'http://69.33.213.199/nerv.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a2e171-635d-c28a-e107-0000def847f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mips","pattern":"[url:value = 'http://69.33.213.199/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11875f2-0b18-50d9-21cf-00000312f724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_64","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd49ae1-b16f-8b92-3c6d-000056468b0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm5","pattern":"[url:value = 'http://69.33.213.199/nerv.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5fc7c9-89b4-636d-256b-00001567e503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86","pattern":"[url:value = 'http://69.33.213.199/nerv.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75b4961-b915-1a1f-8de9-00006061984e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.dbg","pattern":"[url:value = 'http://69.33.213.199/nerv.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dafbcd-bf2d-7e4e-17a4-0000fc4f4380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm7","pattern":"[url:value = 'http://69.33.213.199/nerv.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df16362e-44ea-73c6-2a50-0000bb6d0abf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://ip-69-33-213-199.dfw.megapath.net/nerv.mips","pattern":"[url:value = 'http://ip-69-33-213-199.dfw.megapath.net/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bf1450-7cca-cbc0-4072-0000edba1280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sh4","pattern":"[url:value = 'http://69.33.213.199/nerv.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07027b8-9298-31c0-baa7-0000b5fb29bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mpsl","pattern":"[url:value = 'http://69.33.213.199/nerv.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450c2482-d1e3-1c7d-39c5-0000ee992788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_32","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ddcb5b-fadb-6ef6-a2c0-000044f324e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm6","pattern":"[url:value = 'http://69.33.213.199/nerv.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3edf607-6e77-4ee4-56d9-00006d648b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.ppc","pattern":"[url:value = 'http://69.33.213.199/nerv.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7d0f5d4-2a60-2e52-9a41-000091ee1fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sparc","pattern":"[url:value = 'http://69.33.213.199/nerv.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198ed5a7-b07d-d8f6-e751-0000de0e912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.m68k","pattern":"[url:value = 'http://69.33.213.199/nerv.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4cff81-1663-04f3-1687-0000f8cfc4ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/bin.sh","pattern":"[url:value = 'http://219.156.98.218:49065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63af33-9aac-dc27-8b0e-00002f7f8eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.90.106:37277/i","pattern":"[url:value = 'http://182.126.90.106:37277/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb517ae-21c8-300c-0fb0-00009918f6be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/launch.vbs","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/launch.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2f61db-d227-1126-ec9f-0000a29df8db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/inject.ps1","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/inject.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8d0fe6-bb34-1530-0e27-00004d880a74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/as.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/as.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d2acf0-1b9b-5a45-37b7-00002bdd76e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/wupd.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/wupd.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6d9864-70bd-e3ee-229a-000031333b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/ac.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/ac.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0467d5fd-383e-7cde-a2f3-000066f36088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/i","pattern":"[url:value = 'http://219.156.98.218:49065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2bdbb8-7ea7-e3bc-0483-0000f14b0fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/i","pattern":"[url:value = 'http://182.121.250.165:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abeccef-9671-8a9c-2e9c-00001d5ed490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/bin.sh","pattern":"[url:value = 'http://115.48.12.174:50575/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7dca5-c135-6a6a-ed60-0000382627f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/i","pattern":"[url:value = 'http://180.190.189.204:53404/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d22c68-e17d-6b20-8177-0000e35e0734","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/bin.sh","pattern":"[url:value = 'http://27.215.52.217:41359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a134766e-87e3-360f-5b20-0000eeee89e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/i","pattern":"[url:value = 'http://115.48.12.174:50575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5879db-0a2a-1106-0bec-0000eee784cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mips","pattern":"[url:value = 'http://94.154.43.210/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--039e9dac-a98d-0aee-3732-0000f74cabbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv6l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b3ce6f-2a5c-c134-8e50-0000b0ecd16d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv5l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85aced-0e5b-0920-2aff-0000ca2c820d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv7l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b24a21d-ec2a-5606-5ada-000040ba4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.x86_64","pattern":"[url:value = 'http://94.154.43.210/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a8ff2e-a8a5-22dc-ba3a-00008d8cf8dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv4l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc5d1dd-4da2-52a3-1053-0000020a2111","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/344f7e","pattern":"[url:value = 'http://5.182.210.174/344f7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d82af97-144c-7352-cdbc-00002603a9ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c515ee","pattern":"[url:value = 'http://5.182.210.174/c515ee']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2469196a-1f94-08e2-9b2c-00001e587b98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/573976","pattern":"[url:value = 'http://5.182.210.174/573976']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88fff19-f126-cfa1-651b-000009a2be5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4844d","pattern":"[url:value = 'http://5.182.210.174/c4844d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23a6240-1897-03d5-07c5-0000152b183b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/094392","pattern":"[url:value = 'http://5.182.210.174/094392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96aeb304-d8ed-a04f-7202-00000df99e70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3679a","pattern":"[url:value = 'http://5.182.210.174/b3679a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fbabb7-9bae-1460-d156-000053fbe30d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9dfbc4","pattern":"[url:value = 'http://5.182.210.174/9dfbc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c6088-4034-c5bb-3b43-00006aac384d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/49fa35","pattern":"[url:value = 'http://5.182.210.174/49fa35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd42245b-afd5-c75c-de75-0000fda54558","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/065109","pattern":"[url:value = 'http://5.182.210.174/065109']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4b0278-de42-be57-3d47-00007dac86f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/473c1a","pattern":"[url:value = 'http://5.182.210.174/473c1a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db423d4-7aa1-217b-51e1-00000c53d8cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acb326","pattern":"[url:value = 'http://5.182.210.174/acb326']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c0b3d6-1dd5-a735-4518-000029fe3301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69d5f2","pattern":"[url:value = 'http://5.182.210.174/69d5f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50df3ad8-3930-6f01-4235-00004429304a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/279fe0","pattern":"[url:value = 'http://5.182.210.174/279fe0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae6dde-cbe0-0226-177f-0000925cc61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/456417","pattern":"[url:value = 'http://5.182.210.174/456417']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--154e5548-c866-4743-37c9-0000dc575c45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b08fb","pattern":"[url:value = 'http://5.182.210.174/2b08fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77f2049-be75-1eaa-244d-0000de03bb09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0db2ec","pattern":"[url:value = 'http://5.182.210.174/0db2ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07e229-4ec2-a6e9-d619-000031c63c77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/db7a9c","pattern":"[url:value = 'http://5.182.210.174/db7a9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804f7f65-f6a0-32b0-9f81-0000f4ae75dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ac363","pattern":"[url:value = 'http://5.182.210.174/8ac363']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8192a18a-3fae-14c7-2d3d-0000b1c9a4b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/515c80","pattern":"[url:value = 'http://5.182.210.174/515c80']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c73821a-f573-bfc8-70f7-0000257eb90b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0b1663","pattern":"[url:value = 'http://5.182.210.174/0b1663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60c8e5-231e-88e4-6f0f-000015ce6b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c72382","pattern":"[url:value = 'http://5.182.210.174/c72382']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de7f014-96b9-e7ad-81af-0000c58bd809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/676064","pattern":"[url:value = 'http://5.182.210.174/676064']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c00d38c-4567-fa02-71f9-0000b64c31ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/78f157","pattern":"[url:value = 'http://5.182.210.174/78f157']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02b4ba52-932f-296b-972c-000049688ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/faedd6","pattern":"[url:value = 'http://5.182.210.174/faedd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5642b87a-f10f-92b0-179f-000019deac72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mipsel","pattern":"[url:value = 'http://94.154.43.210/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d7aaea5-9a5e-8bc7-973e-0000ab91d33d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/55bd33","pattern":"[url:value = 'http://5.182.210.174/55bd33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6ce237-1f50-a3dc-ba72-0000fd1e0a2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/804c43","pattern":"[url:value = 'http://5.182.210.174/804c43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5686c6f7-ba79-4d5d-7d95-0000dd867670","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1498b2","pattern":"[url:value = 'http://5.182.210.174/1498b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec58b2b1-579a-d786-7bf4-000083a9c499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4d493d","pattern":"[url:value = 'http://5.182.210.174/4d493d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e3f803-a52b-e196-a53b-0000135623c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/589a29","pattern":"[url:value = 'http://5.182.210.174/589a29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6219c764-d51f-559d-23e2-00005b78cf79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b74d4d","pattern":"[url:value = 'http://5.182.210.174/b74d4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e887f83a-c801-b7ba-2655-000072335836","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de19ef","pattern":"[url:value = 'http://5.182.210.174/de19ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65ac785-6d56-4843-830a-00001c8d6560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a20da","pattern":"[url:value = 'http://5.182.210.174/6a20da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125ebaf7-5fa7-cfc5-2f68-0000d6041a28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e00ee7","pattern":"[url:value = 'http://5.182.210.174/e00ee7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cc4337-f1d0-dcd8-5286-00009cd424c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b39f8f","pattern":"[url:value = 'http://5.182.210.174/b39f8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c498c84e-9f98-8939-e68e-00007385a390","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85692b","pattern":"[url:value = 'http://5.182.210.174/85692b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52bb3d-2314-38d9-0d80-00005a91744d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/76e6f5","pattern":"[url:value = 'http://5.182.210.174/76e6f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda7fb7f-c6d7-e8eb-f91f-000014216423","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/i","pattern":"[url:value = 'http://27.215.52.217:41359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0461516-b9cf-522d-9bd5-000044d7982d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.182.131:41041/Mozi.m","pattern":"[url:value = 'http://115.57.182.131:41041/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b2a05-5d6f-11e8-8899-0000316ab2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.63.8.194:46154/Mozi.m","pattern":"[url:value = 'http://183.63.8.194:46154/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6430928a-ae02-a649-40fe-00007d7a03a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.229.108:47843/Mozi.m","pattern":"[url:value = 'http://110.186.229.108:47843/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f92c51b-67f5-365a-9e56-00004c89d8d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/atomic/atomic.sh","pattern":"[url:value = 'http://77.239.124.108/atomic/atomic.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fc993e-038c-e611-ca7f-0000ce0b0291","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/bin.sh","pattern":"[url:value = 'http://183.23.132.41:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6616849-e316-24ea-b0a5-00001cac4336","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/i","pattern":"[url:value = 'http://61.53.220.201:34645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5f6a82-e55b-f253-dc01-000072014553","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://python3.en-us--balancing.co/jquery.min.js","pattern":"[url:value = 'https://python3.en-us--balancing.co/jquery.min.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0033c6-4b82-7863-221c-0000953fca10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multisavcx.xyz/ncx","pattern":"[url:value = 'https://multisavcx.xyz/ncx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdbd96f-46cc-d414-5f1f-0000f606bc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://elxxvvx.xyz/i","pattern":"[url:value = 'https://elxxvvx.xyz/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24a4109-95fe-0e31-5ba1-000084cca859","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a237d7-1772-cd31-53ed-0000d46f04d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63a825f-fa22-e075-d9b6-00005c2f0fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/bin.sh","pattern":"[url:value = 'http://119.117.76.11:59095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c925a-6287-19df-9a4a-00008f993b6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/i","pattern":"[url:value = 'http://183.23.132.41:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12970091-ee17-6681-c4f7-000066cc919c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/i","pattern":"[url:value = 'http://113.229.190.135:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c55215b-92a1-4c9d-e791-00000301343b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.210:44835/i","pattern":"[url:value = 'http://120.84.212.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0892007e-790e-c2e6-df45-0000b418f294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/i","pattern":"[url:value = 'http://119.117.76.11:59095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3fec70-7859-0cb3-072b-0000e42abc8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.77.1.20:6021/linux","pattern":"[url:value = 'http://120.77.1.20:6021/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--829e0ca6-0f08-4f56-2208-0000928195b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.203.4.64/client.exe","pattern":"[url:value = 'http://85.203.4.64/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03baadc-8d1b-07d1-67a9-00009506345d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b","pattern":"[url:value = 'http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd81d191-2998-47a9-1892-00000a3bd03c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.213:53264/bin.sh","pattern":"[url:value = 'http://115.55.236.213:53264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2059e8-1693-a37a-accb-0000039002ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.95.17:59123/i","pattern":"[url:value = 'http://61.53.95.17:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9f115-5791-5fbb-7e0a-000001848e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/bin.sh","pattern":"[url:value = 'http://60.184.140.145:34890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc06874-60bd-c5af-1034-000091cea6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.253.208:46690/bin.sh","pattern":"[url:value = 'http://59.97.253.208:46690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139b82da-aa5c-4c1a-98af-00001a00455e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9b3ce1-d1a8-1e2d-7ea4-00004878cc46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/bin.sh","pattern":"[url:value = 'http://112.232.226.68:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e25fc2-1896-3396-cd89-0000157ac5a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/RUMPYU14TH.png","pattern":"[url:value = 'http://193.104.58.65/RUMPYU14TH.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c733ad0f-d0b7-125a-4b6c-00005b53a1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/rumpyu13th.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu13th.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7ab72d-47bb-afff-7a1c-0000dfb730ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/img_gas.png","pattern":"[url:value = 'http://193.104.58.65/img_gas.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc689350-994d-0323-f614-000081cf5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/rumpyu18.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu18.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddaf2a8-0324-41cf-8b9f-00006391f18e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.95.103.215/crypt/crypted.ps1","pattern":"[url:value = 'http://23.95.103.215/crypt/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19c1b87-ea81-cc7f-3a8a-000040835cef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bda0899-d845-93c5-db83-0000a86b7758","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg","pattern":"[url:value = 'https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538c1da3-92f5-6277-dda1-0000342a05d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/bin.sh","pattern":"[url:value = 'http://58.47.104.43:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a07c4ee-686b-7719-6936-000066f83f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.61.0:41221/bin.sh","pattern":"[url:value = 'http://219.155.61.0:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b9833c-ec87-01b5-bd00-00007b14997d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sivrex.click/obi/Obi-64Bit-remcos_a.bin","pattern":"[url:value = 'https://sivrex.click/obi/Obi-64Bit-remcos_a.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbe862b-5ba3-ee9d-0fe8-0000816e4da2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2af571d-26c8-8978-ca42-0000531b00b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2813545b-0c32-ed1f-3928-0000cef65d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png","pattern":"[url:value = 'https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b3a7a8-99d8-5a1d-f017-0000903381c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sixmexicos.com/20/stego_cm94aawwlf.png","pattern":"[url:value = 'https://sixmexicos.com/20/stego_cm94aawwlf.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa4e3a6-873d-6700-aec2-00008d6ba338","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nieuw.technoberg.nl//wp-content/bin44.exe","pattern":"[url:value = 'https://nieuw.technoberg.nl//wp-content/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b4889-048f-6312-a9d9-0000de8b28b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/niceorgimg_082205.png","pattern":"[url:value = 'https://sunix-technology.com/images/niceorgimg_082205.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076dc90f-9e5a-1f49-bd89-0000d6117376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/bin.sh","pattern":"[url:value = 'http://123.9.240.151:46316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47c02a-68bc-474f-c32d-0000e2ee854e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/i","pattern":"[url:value = 'http://58.47.104.43:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accd4ba2-c3cf-b473-7e33-0000d8d2e4cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html","pattern":"[url:value = 'https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b544a7a7-7a15-894c-40b0-0000b8b6a159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso","pattern":"[url:value = 'https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--105a0019-e648-054f-4ba4-00006c3f65ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.246:33661/i","pattern":"[url:value = 'http://182.121.153.246:33661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470040ac-f32d-ff7e-e83c-0000d46daee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/i","pattern":"[url:value = 'http://123.9.240.151:46316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce44296-a884-b5b8-7a0c-000068c08ac6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/i","pattern":"[url:value = 'http://182.119.6.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a1843-a6fc-706c-1956-0000e464073e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/bin.sh","pattern":"[url:value = 'http://42.228.233.155:37974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c61b686-8e7b-50c6-6382-000099e47ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/i","pattern":"[url:value = 'http://42.228.233.155:37974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be660a3f-56b9-d2d7-8775-0000857fcb5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://files.catbox.moe/knujwn.png","pattern":"[url:value = 'https://files.catbox.moe/knujwn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01f6457-e0c8-e6f1-09a2-0000111cde7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/bin.sh","pattern":"[url:value = 'http://61.52.159.178:51500/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27eebf33-28ae-6e63-c4b8-0000f6b46348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb0b3fa-a833-bcfa-8abf-000048acfda0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cea42e5-8c4e-4600-7fb3-0000d9cf7148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.231.174:57989/i","pattern":"[url:value = 'http://79.106.231.174:57989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3069985f-080e-8a11-baf0-00001e60f5fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/bin.sh","pattern":"[url:value = 'http://182.119.6.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad7c800-4fee-09a5-0dbc-0000efe25fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/bin.sh","pattern":"[url:value = 'http://120.84.215.27:44835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca557bcb-879c-a625-00ea-0000be463983","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.137.246.220:9705/linux","pattern":"[url:value = 'http://85.137.246.220:9705/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da66f71c-f20d-48a4-15b7-00001e66ac77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.40.213.105:9384/linux","pattern":"[url:value = 'http://121.40.213.105:9384/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d97196-34c0-35a9-e294-0000c4c3a348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.108.130:33716/i","pattern":"[url:value = 'http://119.117.108.130:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d07c51-e8b7-48b7-45d5-00009c51e52f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.229.127.206:53013/i","pattern":"[url:value = 'http://211.229.127.206:53013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86b299d-bae2-0193-ce8a-00009f9b49de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/i","pattern":"[url:value = 'http://61.52.159.178:51500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a567aeb3-a025-d3de-9c65-0000d03c60de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.5.87.54:4370/i","pattern":"[url:value = 'http://36.5.87.54:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3483c000-9eac-f3b3-bd6b-00004b3d404e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/bin.sh","pattern":"[url:value = 'http://222.138.103.241:51367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278f8543-533e-f521-932b-0000bd5984af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/bin.sh","pattern":"[url:value = 'http://182.117.51.201:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0accfd3-cb51-1f5e-0058-0000e8bbea65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.49.31:47819/i","pattern":"[url:value = 'http://182.114.49.31:47819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993203fe-fe3f-aef1-a2ff-0000a8d619ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.247.247:43842/i","pattern":"[url:value = 'http://182.121.247.247:43842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68984925-1793-3a39-038d-0000159f2ef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/i","pattern":"[url:value = 'http://182.117.51.201:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dbf78f-ec08-18cc-4f8f-000054e365b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/bin.sh","pattern":"[url:value = 'http://42.178.23.194:35659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d12bad-845b-1555-8d76-0000a2729471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/i","pattern":"[url:value = 'http://61.137.206.166:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9dd9c08-bee6-cfa6-49cd-0000dff37fb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/i","pattern":"[url:value = 'http://42.178.23.194:35659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b02ff-65cc-5c0a-b0c6-0000bf0fbbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/bin.sh","pattern":"[url:value = 'http://60.217.123.198:46902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84686b51-fff2-af06-1906-00005c685aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/i","pattern":"[url:value = 'http://85.108.86.149:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1498cf99-fae4-e946-25a5-0000b4021632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/bin.sh","pattern":"[url:value = 'http://123.14.178.128:40955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928878f5-6d18-a617-1f29-000043fc0ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/i","pattern":"[url:value = 'http://123.14.178.128:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e98ed1f-0096-8ef6-a469-0000f608372a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/bin.sh","pattern":"[url:value = 'http://61.53.84.173:60970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d97589-ff5a-27bd-2144-0000b7d582c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.41.147:38217/i","pattern":"[url:value = 'http://125.43.41.147:38217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc85ef4-5daf-d3ee-da75-0000f73ca457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.0:38525/i","pattern":"[url:value = 'http://163.142.93.0:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0997e9a2-8306-8e77-7d54-0000cf5d82eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/i","pattern":"[url:value = 'http://61.53.84.173:60970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073aa809-bfb4-9d59-2a22-00005b759175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.132.198.200/payload_v10.sh","pattern":"[url:value = 'http://178.132.198.200/payload_v10.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1eabfa-52cf-6f29-b7a9-0000fbd9eb77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/MSI_PRO.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcf7aea-3ba8-5627-cdd5-00008e085e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/tu3929.exe","pattern":"[url:value = 'https://62.60.226.185/tu3929.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87c7569f-6e09-475f-2a73-0000ebd81725","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8","pattern":"[url:value = 'https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e0b851-b808-a7fe-3fd1-0000151ec715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0993a88f-dc23-768c-6ae8-000011c7ed05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc1.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118e4066-9e4f-009f-64ab-00004255130f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e1e8d0-ef76-2c01-c541-00003855db43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a1598f-33c9-6a68-4f1b-0000d4b76c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/","pattern":"[url:value = 'https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1e5d72-5604-bf57-e439-00005619e7d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/","pattern":"[url:value = 'https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a8d519-1948-fe75-5956-0000c3c3c7c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://107.174.251.112/img/3.jpg","pattern":"[url:value = 'http://107.174.251.112/img/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117c1a04-e95f-4066-44e3-00001ae12aaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vibecoders.vip/softwaretech","pattern":"[url:value = 'http://vibecoders.vip/softwaretech']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5c1b51-bee0-3b83-659e-000052e3d706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1","pattern":"[url:value = 'https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd56784-ecad-f560-5b50-0000ce4f2d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/stego_2pu3tp48pp.png","pattern":"[url:value = 'https://somostask.co/stego_2pu3tp48pp.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d779a-4e7c-cdea-6809-0000578f8a9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/bin.sh","pattern":"[url:value = 'http://61.53.220.201:34645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fe319c-b6f9-5e77-5c76-00009c27dc84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/bin.sh","pattern":"[url:value = 'http://119.183.51.162:34711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e2561e-dce3-7d51-b2fc-0000402bb275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/bin.sh","pattern":"[url:value = 'http://27.220.84.239:55052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c392672-401a-6491-587e-00003fd8f290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=","pattern":"[url:value = 'https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8dcaef-39d5-5feb-9e7c-0000f4d412b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/bin.sh","pattern":"[url:value = 'http://42.5.10.102:53641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8f79b9-dc2c-bd35-91ef-0000bd03dc63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.zenledgerpolicy.com","pattern":"[url:value = 'https://www.zenledgerpolicy.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--912be624-a2bc-9a75-40ec-00006faa0629","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582eca8c-b3aa-385d-60c4-0000f19a9519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://docuslutmentadoonline.top/reference/","pattern":"[url:value = 'https://docuslutmentadoonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e367df-d4a6-aa7d-25c1-0000611c79e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://robinhoodwallet.dervano.vu/windows/","pattern":"[url:value = 'https://robinhoodwallet.dervano.vu/windows/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f62236a-de3d-7ed0-2dcb-0000ac237c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://swanrecovery.com","pattern":"[url:value = 'https://swanrecovery.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca89969f-8f65-439b-6060-0000b146acb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://helnivo.vu/FinalCD","pattern":"[url:value = 'https://helnivo.vu/FinalCD']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c92c4e3-56f7-44b8-4328-0000ee45cbf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://docuuumennnntonline.top/reference/","pattern":"[url:value = 'http://docuuumennnntonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495edd5-e931-336b-906e-0000148158ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azlvaka.vu/access","pattern":"[url:value = 'https://azlvaka.vu/access']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e5bb27-3f06-5e5c-71ef-00001e25740b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f0557-7316-7713-8dbf-00001b26c5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/i","pattern":"[url:value = 'http://27.220.84.239:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6684ddb7-01be-f403-ee7e-0000ea245136","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ad61ec","pattern":"[url:value = 'http://5.182.210.174/ad61ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999e2779-2616-04d7-0da7-000062241ace","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4a84f","pattern":"[url:value = 'http://5.182.210.174/c4a84f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee00321-05f3-6279-3d62-000046ded88c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eafe3","pattern":"[url:value = 'http://5.182.210.174/3eafe3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f479af-6511-03ce-6aad-0000627fab31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fc2db6","pattern":"[url:value = 'http://5.182.210.174/fc2db6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4485a36-5f24-e74b-9eab-0000ecc3a014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9685","pattern":"[url:value = 'http://5.182.210.174/9c9685']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ba805-c36e-40b6-8495-000038df487d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a40ae","pattern":"[url:value = 'http://5.182.210.174/6a40ae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91139d9c-4f3b-0020-3645-0000402eb122","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3eb09","pattern":"[url:value = 'http://5.182.210.174/b3eb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c06043-7e4e-3b74-daf2-00007833df10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/026141","pattern":"[url:value = 'http://5.182.210.174/026141']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfa5ab1-8d9b-18ce-6d66-00002dd67ff8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/939936","pattern":"[url:value = 'http://5.182.210.174/939936']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e278cd-b4fd-3675-effc-0000c4e330b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f287aa","pattern":"[url:value = 'http://5.182.210.174/f287aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031fa63d-fc09-464e-083d-0000ad9025f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b97872","pattern":"[url:value = 'http://5.182.210.174/b97872']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9326b6-f8a5-0682-556d-00009f7d86cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a3160","pattern":"[url:value = 'http://5.182.210.174/9a3160']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c35337-a1a0-f26e-7ac2-000046a92b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh","pattern":"[url:value = 'https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab661674-cc20-0e13-de28-00001fc7f433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/bin.sh","pattern":"[url:value = 'http://182.126.248.10:58244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e96bc9-a2bc-e4cd-0f6c-000035d700b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/bin.sh","pattern":"[url:value = 'http://85.108.86.149:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e75554-2ef3-d84c-4df0-000066611d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1420190-56f5-bd85-e583-000088acec62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/bins/parm64","pattern":"[url:value = 'http://31.77.227.121/bins/parm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e48ce00-c0da-620f-b104-0000d9087642","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/i","pattern":"[url:value = 'http://42.5.10.102:53641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19510ad-3ead-a834-cac6-0000ef71fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.141:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.141:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72080ddc-0bfc-7a8c-d25a-0000cb907ff7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.44.60:34879/i","pattern":"[url:value = 'http://182.113.44.60:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006402b5-b200-2859-7398-00004f0abe96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/i","pattern":"[url:value = 'http://182.126.248.10:58244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcf0717-7b72-05cc-9585-0000a985b972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.147.247:47891/i","pattern":"[url:value = 'http://115.56.147.247:47891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f082bf-8861-7593-83ff-00008e7cf4c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.150.195.235/newpath.sh","pattern":"[url:value = 'http://45.150.195.235/newpath.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9104d0b-43c2-beda-d23a-0000a0438b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/bin.sh","pattern":"[url:value = 'http://175.168.114.203:46828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42731c28-3396-3460-a459-0000ed532f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/i","pattern":"[url:value = 'http://175.168.114.203:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcd4b9c-d8a0-0624-7bfd-0000f6272c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://flooriscoveringworld.com/bin.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09a891f-01eb-e0fd-e1fc-00001997f87b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/i","pattern":"[url:value = 'http://115.62.135.216:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c16-bf15-93c9-57ec-0000e4f4a37d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://wylkpznq.xyz/hukl/cp/bin.exe","pattern":"[url:value = 'https://wylkpznq.xyz/hukl/cp/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e33e1b-9fd9-1e18-e5ec-00009cc3a133","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/Candy.png","pattern":"[url:value = 'https://somostask.co/Candy.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c942cbd-53f4-e023-512e-0000f7a31452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png","pattern":"[url:value = 'https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87daa203-03fa-c24b-8d82-00000c071ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png","pattern":"[url:value = 'https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bcfa5e-286f-6edf-b2fd-0000bed0b007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/646d52","pattern":"[url:value = 'http://5.182.210.174/646d52']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9e5160-c92f-b2c7-9e3e-000008b65ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e27047","pattern":"[url:value = 'http://5.182.210.174/e27047']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0003f4-531e-5d52-050e-00006d96cd5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6a806","pattern":"[url:value = 'http://5.182.210.174/e6a806']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a354c1a0-19ab-da6e-02d6-000093e96b8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/908e60","pattern":"[url:value = 'http://5.182.210.174/908e60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f2188-205f-5407-6976-00003c1e272b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/833d99","pattern":"[url:value = 'http://5.182.210.174/833d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d14cb64-9dff-c980-6661-0000897cfc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f61d73","pattern":"[url:value = 'http://5.182.210.174/f61d73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f253aca-da1a-240b-7448-000006e35c29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6711b4","pattern":"[url:value = 'http://5.182.210.174/6711b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad264fa5-8689-fb73-48b5-00008e290cbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/229db9","pattern":"[url:value = 'http://5.182.210.174/229db9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a94d0a6-7a52-7aa8-12f0-00005fd9f614","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/59e4b9","pattern":"[url:value = 'http://5.182.210.174/59e4b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5a0c31-20dd-688e-bddf-0000f6d43d35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1e596c","pattern":"[url:value = 'http://5.182.210.174/1e596c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19012bb1-5080-a2b0-9d4c-0000319d1c6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/63d2dd","pattern":"[url:value = 'http://5.182.210.174/63d2dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae44a27d-2a3d-0f00-aa0f-000045dfe5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a9eeb4","pattern":"[url:value = 'http://5.182.210.174/a9eeb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a7e37a-ac88-b4c5-dd17-000090f13e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/i","pattern":"[url:value = 'http://115.58.177.63:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048fc7b4-3065-162e-b43f-0000cf9dcc5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c97dc31a-23bc-dd1d-1eca-00002ba4eacd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ad42ea-c6eb-25cc-6fc0-00003a2be24c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8f5a94-19c0-c3ce-4aca-0000333f7e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/pr2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/pr2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c6b1d0-30b5-5bb3-3db6-0000f62688a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/prcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/prcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c969e9-6e7e-6b90-f300-000004c204ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/img_122332.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/img_122332.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9cc55c-5035-10a6-6579-0000dee46ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/bin.sh","pattern":"[url:value = 'http://182.112.89.53:48165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ee0b5f-1895-d7ba-d652-000037d03a94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/i","pattern":"[url:value = 'http://182.130.209.58:35031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe626ff-acd7-5f2c-af0e-0000c059b585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/bin.sh","pattern":"[url:value = 'http://222.137.105.216:51325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138feb62-63c5-d32e-56b0-00007fa8ee65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/i","pattern":"[url:value = 'http://182.112.89.53:48165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ba1677-8a45-aabd-a5b0-000092e4d40c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a862e32-2fe3-f2e1-913c-0000dc455b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/eecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/eecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--544176f6-93a3-b777-b012-00003d81e5ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kits.frog.tw/Images/stego_jxdqj7fw9j.png","pattern":"[url:value = 'https://kits.frog.tw/Images/stego_jxdqj7fw9j.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79234fc4-2dc8-5a69-186e-0000b75659f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/clc.zip","pattern":"[url:value = 'https://gaiadeqi.com/clc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15368973-8176-6aa0-a644-0000873a2529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/i","pattern":"[url:value = 'http://222.137.105.216:51325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4588abe6-c87d-5efe-ddce-0000f78987c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/bin.sh","pattern":"[url:value = 'http://116.2.50.30:54263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9dd3435-a9b8-7f70-77f8-0000959e3fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/bin.sh","pattern":"[url:value = 'http://115.50.254.53:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73265546-a101-409a-7e86-000095a09843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/i","pattern":"[url:value = 'http://42.225.241.153:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678947cd-295e-6d63-aed2-0000465da29c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/i","pattern":"[url:value = 'http://116.2.50.30:54263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71daca9-e33e-b7e1-286e-0000436bbc9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/i","pattern":"[url:value = 'http://115.50.254.53:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81e6727-d3cf-ec00-352c-000019c7d570","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/bin.sh","pattern":"[url:value = 'http://42.7.217.91:35797/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a286c2-1776-0b05-f94c-0000335cfa9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/bin.sh","pattern":"[url:value = 'http://162.255.251.91:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0929ed-2a4e-92cb-c96d-000068d621cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/bin.sh","pattern":"[url:value = 'http://115.62.135.216:60668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca05231-d13a-98a8-18d7-00008f84565b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.81:51284/i","pattern":"[url:value = 'http://163.142.93.81:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640ab228-4790-bd92-6c13-0000f40e77b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/bin.sh","pattern":"[url:value = 'http://14.107.121.45:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85247879-3a2b-9876-4c88-000074b301db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/bin.sh","pattern":"[url:value = 'http://42.225.241.153:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf0a8d-9c6c-7865-70ec-0000f118ea9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/i","pattern":"[url:value = 'http://162.255.251.91:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b99a412-8723-18fd-50ab-0000a86c6036","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/i","pattern":"[url:value = 'http://14.107.121.45:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6fe0d0-20fd-b777-64e9-0000fa8cffb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/i","pattern":"[url:value = 'http://113.236.118.216:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688a4f9a-db4c-83fc-b790-00007e7e4114","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.56.136.70:46446/i","pattern":"[url:value = 'http://42.56.136.70:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f08b43-3ab5-d382-e474-0000e360c58f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.4.93:56227/i","pattern":"[url:value = 'http://115.51.4.93:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c42c53-e671-f630-8343-00003fb4b8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:57585/i","pattern":"[url:value = 'http://41.201.226.25:57585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228b9cac-23ac-971d-ee7d-0000838a7e36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.216.59:45025/i","pattern":"[url:value = 'http://27.207.216.59:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2720583-d3a1-5940-3c14-0000d47904f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.113:60057/bin.sh","pattern":"[url:value = 'http://59.96.139.113:60057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fca4e-2ca5-6ff6-ab5b-000044b3968d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/i","pattern":"[url:value = 'http://112.248.174.58:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d92283-11a7-ced8-96fb-00004fb8cc2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/bin.sh","pattern":"[url:value = 'http://42.230.209.22:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ca3871-4a48-b47f-7aa9-0000cd6bd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/i","pattern":"[url:value = 'http://42.230.209.22:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d686da-088c-cd99-0b46-00007601bd66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/bin.sh","pattern":"[url:value = 'http://115.57.212.220:54561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b6a766-96bd-a784-86bc-00007b68ce8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://140.237.7.157:41787/i","pattern":"[url:value = 'http://140.237.7.157:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f7cb20-39e5-45c7-952c-0000c7ec6a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/i","pattern":"[url:value = 'http://115.57.212.220:54561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd3e08f-6171-c87f-e125-00005fbb69fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.13.196:55125/bin.sh","pattern":"[url:value = 'http://182.120.13.196:55125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f19e4-7e94-685e-76ea-00005122893b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.235:41753/i","pattern":"[url:value = 'http://46.236.65.235:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b0e494-4af8-f6d8-59d8-0000ff1fd016","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/bin.sh","pattern":"[url:value = 'http://123.9.195.116:34313/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fa32c0-e955-e16e-9b0a-0000d5c19cd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb1a9b0-89c4-9ea7-288f-0000f28b3fa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/bin.sh","pattern":"[url:value = 'http://61.54.253.22:60163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74abb301-a612-197e-2d15-00007b58a8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/bin.sh","pattern":"[url:value = 'http://182.121.43.33:42422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceb20f8-d598-b824-653f-0000edfd7898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.177.12:56227/i","pattern":"[url:value = 'http://123.12.177.12:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9014ab2-4d39-330f-bdcf-00004f3df870","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/bin.sh","pattern":"[url:value = 'http://123.190.17.0:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f867940-66f9-8c2c-c3cb-00007eca2cdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/i","pattern":"[url:value = 'http://123.9.195.116:34313/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5ff39f0-6472-feae-9a6d-0000623454fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/i","pattern":"[url:value = 'http://182.121.43.33:42422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fae832c-7a7e-ad80-679a-0000e4e1bf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/i","pattern":"[url:value = 'http://61.54.253.22:60163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e951b9c-357d-7032-454f-0000292ca825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/bin.sh","pattern":"[url:value = 'http://182.123.162.14:46510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e3e9aa-5382-3a98-6ff4-000096266647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.118.232:57819/bin.sh","pattern":"[url:value = 'http://115.61.118.232:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66ebaa8-36cf-b7f7-e4f2-0000973d43ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/bin.sh","pattern":"[url:value = 'http://115.55.52.24:36106/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336155c8-051d-6161-463a-000096b37aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/bin.sh","pattern":"[url:value = 'http://123.9.223.160:52129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf511864-f880-93ac-cf4a-000025dfdfa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/i","pattern":"[url:value = 'http://182.123.162.14:46510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a164071-9bdf-638b-4be3-0000a5e8bda7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/bin.sh","pattern":"[url:value = 'http://61.53.120.157:38424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8882e6a7-2789-23c9-dc2c-000023d3b8a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/i","pattern":"[url:value = 'http://115.55.52.24:36106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d63c89f-7d9b-6114-c0b8-0000d5a1d74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/bin.sh","pattern":"[url:value = 'http://119.114.63.205:38557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b156d33-3629-43ec-fc6f-00006fd5effd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/bin.sh","pattern":"[url:value = 'http://223.151.74.149:48587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c00f8e-bdf1-8a8b-807b-00000321ad5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/bin.sh","pattern":"[url:value = 'http://42.231.203.243:47565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8266700f-dcd6-4ce8-198d-000074c4bf8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/i","pattern":"[url:value = 'http://61.53.120.157:38424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e57ead-a69c-09f5-9a59-0000440ac925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/bin.sh","pattern":"[url:value = 'http://112.248.174.58:54368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08b3a85-c072-f775-b198-00004c4b18b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/i","pattern":"[url:value = 'http://123.9.223.160:52129/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14de4f6-1ee0-d23b-3c4e-0000774041b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/i","pattern":"[url:value = 'http://119.114.63.205:38557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f70b09-8f97-f487-d1be-00003b8ac097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/i","pattern":"[url:value = 'http://42.231.203.243:47565/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1bf748-8e44-d159-dbea-00005b67271f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/i","pattern":"[url:value = 'http://125.46.213.70:33401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427ab81-bff2-220a-6b77-0000fc78e424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.102.151:51009/i","pattern":"[url:value = 'http://175.174.102.151:51009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ace10a8-6b13-d54e-b5d9-00001503b48a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.197.57:46174/i","pattern":"[url:value = 'http://175.165.197.57:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--896a7bf2-249f-10c9-faf3-0000239acae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/bin.sh","pattern":"[url:value = 'http://42.224.103.64:50547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3951249f-662a-9124-5e3c-0000efbd3a9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/i","pattern":"[url:value = 'http://42.224.103.64:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba3b094-1784-1eeb-e2a4-0000a57609d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/bin.sh","pattern":"[url:value = 'http://42.5.254.164:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f619a74-fb1a-08b8-6ee0-00001695b663","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.27:46218/i","pattern":"[url:value = 'http://125.44.18.27:46218/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f166d4-4de2-456f-aa4e-000087ebd641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm7","pattern":"[url:value = 'http://124.163.212.119:800/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d3f1bc-6f6b-f415-c2f8-00002a4f11d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm","pattern":"[url:value = 'http://124.163.212.119:800/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6bdcbb-4373-321c-2b36-0000ca9066e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arc","pattern":"[url:value = 'http://124.163.212.119:800/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff65642-feba-9673-dc9f-00003f57b124","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm6","pattern":"[url:value = 'http://124.163.212.119:800/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c897c68-0cea-ab76-dcdd-0000a55cd234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mips","pattern":"[url:value = 'http://124.163.212.119:800/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1df2a0-686c-141b-9541-00006882f782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i686","pattern":"[url:value = 'http://124.163.212.119:800/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95bbaa1-da07-52a1-c01c-0000ce5fbc7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mpsl","pattern":"[url:value = 'http://124.163.212.119:800/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b9777e-0a9a-804c-c05b-000078dae4bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/ppc","pattern":"[url:value = 'http://124.163.212.119:800/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ffc927-5f6e-44e2-d2aa-0000fe4e9612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/spc","pattern":"[url:value = 'http://124.163.212.119:800/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ff07f8-74e8-acb5-7128-00002de21eca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm5","pattern":"[url:value = 'http://124.163.212.119:800/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a61a38-e438-fc35-a6a7-000051960d44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86_64","pattern":"[url:value = 'http://124.163.212.119:800/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a548be-8842-ccb0-082c-0000a5aa04ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/m68k","pattern":"[url:value = 'http://124.163.212.119:800/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99926ce-2c9d-f403-40b0-0000254a5689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i486","pattern":"[url:value = 'http://124.163.212.119:800/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0b46b0-36f4-f58e-cbd7-000000d98ac9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86","pattern":"[url:value = 'http://124.163.212.119:800/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ffbb50-adf3-594e-9450-0000b2f9f303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/bin.sh","pattern":"[url:value = 'http://115.62.154.212:42250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acabaf44-2e8b-0ba4-b964-0000eb7eba58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/bin.sh","pattern":"[url:value = 'http://175.107.210.253:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f673d1ab-be90-21f6-d393-000070742301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.161.106:41462/bin.sh","pattern":"[url:value = 'http://27.217.161.106:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99115be5-e83f-2267-d773-000068a0f311","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/bin.sh","pattern":"[url:value = 'http://93.113.166.57:59924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53a294-2e67-2752-bb3e-0000603f8b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/i","pattern":"[url:value = 'http://115.62.154.212:42250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f7778a1-dcee-1825-6019-0000054b65f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/bin.sh","pattern":"[url:value = 'http://115.56.100.50:44024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24682dc4-c2b4-359e-c74f-00000193c893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/i","pattern":"[url:value = 'http://115.56.100.50:44024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--add5cca7-6ecc-330d-d7db-0000b9b7b0ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/bin.sh","pattern":"[url:value = 'http://125.40.3.106:49988/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d70ea09-541a-9837-9379-00000f331476","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/lilin.sh","pattern":"[url:value = 'http://124.163.212.119:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95942b6e-7110-94f8-14e1-0000372d0925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/i","pattern":"[url:value = 'http://123.8.162.45:59164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2c9d5e-5454-ea58-4c09-00006463de3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/i","pattern":"[url:value = 'http://93.113.166.57:59924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2bd328-7462-5954-84bc-0000c4813d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/bin.sh","pattern":"[url:value = 'http://182.127.84.138:35880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36a3a7d-d9b8-ec47-06fc-00002091e851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/i","pattern":"[url:value = 'http://125.40.3.106:49988/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b18caa8-c3da-00fc-5d20-00000164eeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.97.100.192:59504/i","pattern":"[url:value = 'http://210.97.100.192:59504/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51c6aaa-42a7-010f-8997-0000ab8a42bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/i","pattern":"[url:value = 'http://182.127.84.138:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db19f5-f45f-eede-4a5b-0000cd785606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.108.130:33716/bin.sh","pattern":"[url:value = 'http://119.117.108.130:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4105f5de-aee3-a607-da28-00006ac0bca2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/i","pattern":"[url:value = 'http://60.162.38.51:34372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63d6675-272f-c5d5-3b16-0000cd836f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/i","pattern":"[url:value = 'http://182.116.20.246:39870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b9d10b-358f-d1d5-da1d-0000d2bd557e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.201.235:59633/i","pattern":"[url:value = 'http://42.225.201.235:59633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda9eeab-583c-05dc-93b7-00004eac32bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.25.157.124:39654/bin.sh","pattern":"[url:value = 'http://78.25.157.124:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c071d2-8642-c29c-3356-0000d73b2e53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/bin.sh","pattern":"[url:value = 'http://105.186.163.117:50795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--617653f6-f031-4f3b-e740-00006dcf9033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/i","pattern":"[url:value = 'http://105.186.163.117:50795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb19e7d-8903-5c7a-2f69-0000fbfb9aee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/i","pattern":"[url:value = 'http://124.234.219.153:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95ff55b-e0fc-5e65-7ecd-00000680dd8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/bin.sh","pattern":"[url:value = 'http://27.215.123.78:39336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b446d77a-25b2-9660-2b2b-0000fcd61fe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/bin.sh","pattern":"[url:value = 'http://175.151.74.60:46830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734d5ee-d130-3769-0b7f-00008af17dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/i","pattern":"[url:value = 'http://27.215.123.78:39336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc5fcad-f572-6b3a-8ae1-000076d1135f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d085433-748f-ee39-d4e4-000002570e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/i","pattern":"[url:value = 'http://175.151.74.60:46830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931b17a-bf89-0f3f-b501-0000011037f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/weds/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/weds/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bf21cf-0da9-8089-128f-0000b9c42f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/image/stego_3d5qe0layt.png","pattern":"[url:value = 'https://coconutoficial.com.br/image/stego_3d5qe0layt.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d215717-74a9-7e49-0942-0000548c2bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/AdobePDF.bat","pattern":"[url:value = 'https://brightwatch.mypi.co/AdobePDF.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c125752e-f610-67c4-081f-0000dfe97771","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/Adobeinstaller.msi","pattern":"[url:value = 'https://brightwatch.mypi.co/Adobeinstaller.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34c325c-db1b-18f8-a0ef-000003cacb03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/i","pattern":"[url:value = 'http://42.177.182.116:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ea7aae-9222-a86c-fe9b-0000b29faf48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/bin.sh","pattern":"[url:value = 'http://39.78.182.86:43103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fa4351-088c-2fec-2a8d-00001f3406f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://159.255.31.48:59678/bin.sh","pattern":"[url:value = 'http://159.255.31.48:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f2fb03-8235-f607-7e02-000052cb5098","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.219.218:37565/bin.sh","pattern":"[url:value = 'http://120.28.219.218:37565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e72aac5-44c8-ee00-7fe6-000089f155e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/bin.sh","pattern":"[url:value = 'http://175.44.156.36:37033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c40838-5411-d415-2a7f-00008ade7d57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e4aed8-a5b6-350d-f3b9-0000e00f9600","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://github.com/Orukemer/image/releases/download/Image/3.jpg","pattern":"[url:value = 'https://github.com/Orukemer/image/releases/download/Image/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136c090-17f5-4e23-25b7-00000d25bf68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ca56c8-9ad6-4027-5cce-0000fc9a53cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.225.135.160/downloads/3.jpg","pattern":"[url:value = 'http://45.225.135.160/downloads/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2835b36-7f89-7fe2-52b5-0000f96e8a5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39d453e-114e-9801-4ac7-0000d933d93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed0403a-bda5-618f-a4c7-0000ab20b8d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc6b925-4cd2-d732-d977-00008df0b3aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835e4546-dab5-cf42-c59c-000081bc73ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.109.75.161:8080/lin1948WEx","pattern":"[url:value = 'http://86.109.75.161:8080/lin1948WEx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fac299-9479-d285-eb18-0000a210681b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.98.99:33747/Mozi.a","pattern":"[url:value = 'http://112.123.98.99:33747/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df068758-1dcf-561c-3a7b-00000b7891c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/bin.sh","pattern":"[url:value = 'http://210.208.111.36:53831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c14faa1-6c92-465d-b200-0000d845afaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/i","pattern":"[url:value = 'http://196.188.75.58:44319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29b7ccf-9527-63b4-ee33-00008ad2e837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/i","pattern":"[url:value = 'http://175.44.156.36:37033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c82576-6d5e-46f7-c94c-0000d946cbfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43292038-c480-1110-dced-000009384d0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/nzX44SVMY.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/nzX44SVMY.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfa41bb-522a-2941-6553-000089773134","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlc.zip","pattern":"[url:value = 'https://colibrik.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2457642-215f-352f-aa97-0000f8bb77bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.81.174:41032/i","pattern":"[url:value = 'http://222.139.81.174:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ddf9ed-7aa0-d74f-0e0a-00006850f260","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/i","pattern":"[url:value = 'http://39.78.182.86:43103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c74e3d9-48c7-5a99-de5a-000054155e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/bin.sh","pattern":"[url:value = 'http://45.233.94.135:35449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba266b1-220a-2dfa-b09d-00003b95df67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/i","pattern":"[url:value = 'http://45.233.94.135:35449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd9f9db-70f7-1deb-5441-00004fdbaff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/bin.sh","pattern":"[url:value = 'http://202.163.107.242:56229/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bea273-25da-6ffa-995c-00001229d3b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://159.255.31.48:59678/i","pattern":"[url:value = 'http://159.255.31.48:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae111770-6280-07f5-ffe6-0000cfb48934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc","pattern":"[url:value = 'http://91.192.81.41:8080/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c877b0-474e-7efc-fe27-0000c4e91e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_64","pattern":"[url:value = 'http://91.192.81.41:8080/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a326be-d80c-f43d-9592-0000b7b7e741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86","pattern":"[url:value = 'http://91.192.81.41:8080/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b1d325-7f13-f007-f0e4-0000dc83d45b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm6","pattern":"[url:value = 'http://91.192.81.41:8080/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db43f527-fb83-b64c-9f0d-00004f6a10c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/sh4","pattern":"[url:value = 'http://91.192.81.41:8080/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcef90f-6fb1-e5f2-4272-00004688b74b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mips","pattern":"[url:value = 'http://91.192.81.41:8080/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a129b9f-b466-ffeb-1d67-000063359880","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc440","pattern":"[url:value = 'http://91.192.81.41:8080/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dc26c0-ca15-1b08-76a5-00002962ced2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_32","pattern":"[url:value = 'http://91.192.81.41:8080/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e2cdd9-e2e6-b419-5fd2-0000467e6191","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/m68k","pattern":"[url:value = 'http://91.192.81.41:8080/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb6e3b3-bd8f-a8b6-3421-0000643fb33e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm7","pattern":"[url:value = 'http://91.192.81.41:8080/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1c3fc6-6153-d2d8-6b8e-00002d8bd901","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mpsl","pattern":"[url:value = 'http://91.192.81.41:8080/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b8829f-3bb0-c719-eee8-0000ce367bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm5","pattern":"[url:value = 'http://91.192.81.41:8080/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667b91b2-8c80-3eba-fb79-00009d217c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm","pattern":"[url:value = 'http://91.192.81.41:8080/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cce24f5-95fe-210f-5074-0000ca4dfaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/bin.sh","pattern":"[url:value = 'http://27.152.10.88:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1525bd4-02be-a393-e504-0000a2dc6cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/bin.sh","pattern":"[url:value = 'http://105.225.189.234:48747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8bf476a-a621-4ac9-b27d-000055d07c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.4.133:60713/i","pattern":"[url:value = 'http://125.41.4.133:60713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70992961-b7d4-ca9d-a643-000070f650c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/982cd0","pattern":"[url:value = 'http://5.182.210.174/982cd0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb96d9c-f519-2242-e9e5-000062911a16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d834af","pattern":"[url:value = 'http://5.182.210.174/d834af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028a1280-e09a-3b4d-1ee1-000060da44c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14acdf","pattern":"[url:value = 'http://5.182.210.174/14acdf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ae244-d3c9-fb78-4f8b-0000641349f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a0ec06","pattern":"[url:value = 'http://5.182.210.174/a0ec06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37744b91-5b6a-158d-a461-00004c42b4b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/597d4b","pattern":"[url:value = 'http://5.182.210.174/597d4b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d49ec0-5f5a-aa41-576b-00000ba56265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e04f45","pattern":"[url:value = 'http://5.182.210.174/e04f45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55c1155-eb62-cf3e-1e16-0000af0597cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/797dff","pattern":"[url:value = 'http://5.182.210.174/797dff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14858b9b-9068-1fcc-8c65-000040952484","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f82d25","pattern":"[url:value = 'http://5.182.210.174/f82d25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3009232d-8ad8-cce7-81b5-000003965fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1294b8","pattern":"[url:value = 'http://5.182.210.174/1294b8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13bc35f-a7cf-13e0-9c82-0000c24a414b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/370ef8","pattern":"[url:value = 'http://5.182.210.174/370ef8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02403f8-7da5-7a09-7387-0000588fd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aede8d","pattern":"[url:value = 'http://5.182.210.174/aede8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36387ce4-190e-32bb-fcc9-0000f115b380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c060bd","pattern":"[url:value = 'http://5.182.210.174/c060bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc4842e-e5a3-d661-38d2-0000054375e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74d9f9","pattern":"[url:value = 'http://5.182.210.174/74d9f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c725c74e-87a0-a7a8-e766-000041cd706d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79743e","pattern":"[url:value = 'http://5.182.210.174/79743e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7561d69b-591d-8242-2a0f-0000e8e7219d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8a90f5","pattern":"[url:value = 'http://5.182.210.174/8a90f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfde209f-067e-c760-8e49-0000f6d661dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/08040b","pattern":"[url:value = 'http://5.182.210.174/08040b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cc01de-5052-6f76-3aff-0000f8a8e24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4af73","pattern":"[url:value = 'http://5.182.210.174/b4af73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a0a1e-09a9-253d-fce9-0000f8f4ca22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90e1de","pattern":"[url:value = 'http://5.182.210.174/90e1de']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9663bf23-3985-3129-cb7c-0000799b3f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7202b4","pattern":"[url:value = 'http://5.182.210.174/7202b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19389b66-e55a-b21a-43a3-0000029b196a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ef423","pattern":"[url:value = 'http://5.182.210.174/6ef423']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7687d518-7927-d0c7-ceb5-000069d090c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d97308","pattern":"[url:value = 'http://5.182.210.174/d97308']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72825d66-3e9f-4827-bded-0000b48f335b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d19a37","pattern":"[url:value = 'http://5.182.210.174/d19a37']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89aaf4e0-5eda-db00-7834-00001b47fbc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae9a6b","pattern":"[url:value = 'http://5.182.210.174/ae9a6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0107a68-c052-4134-9900-00007ad55e8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5a848f","pattern":"[url:value = 'http://5.182.210.174/5a848f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99d15cc-0973-12b6-5865-0000d5c823be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50edcc","pattern":"[url:value = 'http://5.182.210.174/50edcc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e427499-9882-7ce0-9840-0000d5355ae1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/846cac","pattern":"[url:value = 'http://5.182.210.174/846cac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eb4a44-a0b9-2c25-dfc6-0000beabfc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba641b","pattern":"[url:value = 'http://5.182.210.174/ba641b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6450097-0d07-0e43-003e-00000a9c5e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85a4f4","pattern":"[url:value = 'http://5.182.210.174/85a4f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc2c4a8-3e08-7b53-ea2d-0000f9e1f85c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b6973a","pattern":"[url:value = 'http://5.182.210.174/b6973a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab5890d-57dd-6284-2372-0000ade4b296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/29ea88","pattern":"[url:value = 'http://5.182.210.174/29ea88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5245a95b-6239-0e9f-5c27-0000edec3612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/adb88f","pattern":"[url:value = 'http://5.182.210.174/adb88f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408deab6-0682-d2ee-b342-0000023d23b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7a381","pattern":"[url:value = 'http://5.182.210.174/b7a381']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180aace0-2765-c0c6-7ca3-0000bff38fed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/24dc12","pattern":"[url:value = 'http://5.182.210.174/24dc12']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc500059-d91a-a21f-e3ad-0000fc7001b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8b233","pattern":"[url:value = 'http://5.182.210.174/b8b233']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e334fee-5047-5bdc-1715-00009f3b8a56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e7b8f7","pattern":"[url:value = 'http://5.182.210.174/e7b8f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d1e986-da7f-a242-c1da-00006fa68853","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b87566","pattern":"[url:value = 'http://5.182.210.174/b87566']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d2d840-051e-db6f-e326-0000a5d034b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/i","pattern":"[url:value = 'http://27.152.10.88:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fc036a-9959-f615-1354-00002e10e6ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5fb90f-1846-c9ea-b01a-000031f95b1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlc.zip","pattern":"[url:value = 'https://kee126.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f72245-f330-51b9-3698-0000064c2b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://130.12.209.153:51945/i","pattern":"[url:value = 'http://130.12.209.153:51945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639331b3-2f46-6032-fe20-00009c35c0c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.61.118.232:57819/i","pattern":"[url:value = 'http://115.61.118.232:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96811a4c-cf1b-1cf3-abfe-0000a76478f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.92.221:44835/i","pattern":"[url:value = 'http://163.142.92.221:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126e01ca-74ea-55cf-ce79-0000db5f2b34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/bin.sh","pattern":"[url:value = 'http://221.14.36.34:39539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61b2340-35bc-50fc-d8df-0000b0207615","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9162d4-2c75-67ae-f95b-0000ae3572ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://onlypackaging.grupoinde.com/zz/crypted.ps1","pattern":"[url:value = 'https://onlypackaging.grupoinde.com/zz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacda4f4-42e9-cf4b-74c1-000069055988","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74346a","pattern":"[url:value = 'http://5.182.210.174/74346a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1558a8-4617-facb-4b6a-00003ca27a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/58e1a8","pattern":"[url:value = 'http://5.182.210.174/58e1a8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1306e3b5-1d58-2a8c-c7a9-0000abd37c5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/905a41","pattern":"[url:value = 'http://5.182.210.174/905a41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1214ac-b105-6490-7695-0000f9034788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acaa53","pattern":"[url:value = 'http://5.182.210.174/acaa53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daac44ed-95a3-6c57-cf14-00001e396345","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bfe63f","pattern":"[url:value = 'http://5.182.210.174/bfe63f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922a675e-72c7-ed8c-6ecc-000063537230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4c7cb5","pattern":"[url:value = 'http://5.182.210.174/4c7cb5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c8be5c-841d-aa90-527d-00007e295b99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/efeb39","pattern":"[url:value = 'http://5.182.210.174/efeb39']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be63e47b-bbb9-14bd-7110-0000427bc4ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7d4dfe","pattern":"[url:value = 'http://5.182.210.174/7d4dfe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c952eea1-d9e9-66e3-044b-000069549c8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eaa22","pattern":"[url:value = 'http://5.182.210.174/3eaa22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1db5eeb-3d12-f512-45c9-000064f801c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e3530c","pattern":"[url:value = 'http://5.182.210.174/e3530c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d739a5-c25d-3ad7-9a11-00003df610e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/89e244","pattern":"[url:value = 'http://5.182.210.174/89e244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e7516f-8085-2a11-6b7b-00002a33d28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/699b25","pattern":"[url:value = 'http://5.182.210.174/699b25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3011ef7-604e-72f4-2d74-0000e7bb2f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/i","pattern":"[url:value = 'http://221.14.36.34:39539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d44ca4-f371-8364-e618-0000f775a656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:47543/i","pattern":"[url:value = 'http://125.47.87.135:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7140dba-23db-cb1f-9ac2-000093cb948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0d23de-a005-0681-e9c9-0000b3795656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.139/Xloadfile/bin.exe","pattern":"[url:value = 'http://195.177.94.139/Xloadfile/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9b6442-0ce7-16a6-9993-0000e124f874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlccz.zip","pattern":"[url:value = 'https://colibrik.com/vlccz.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c7cb87-c829-1964-186c-00003d0211ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/bin.sh","pattern":"[url:value = 'http://42.239.240.192:35535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6143ffce-0504-1072-4457-000013b613dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/bin.sh","pattern":"[url:value = 'http://125.45.10.162:57743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3dc715-c837-a965-4215-000032482940","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.63.144:39989/i","pattern":"[url:value = 'http://105.184.63.144:39989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44573107-153f-c685-6ebc-0000c26b908a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/i","pattern":"[url:value = 'http://42.239.240.192:35535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa20572-4c9a-c01b-7f13-0000e6accfeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/bin.sh","pattern":"[url:value = 'http://222.139.94.187:45764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c2a2c1-2a0b-90e3-6c7a-00008d40c488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.157.243.235:47252/bin.sh","pattern":"[url:value = 'http://91.157.243.235:47252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800151e9-cf4d-f2f1-42b1-000086e2f282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/i","pattern":"[url:value = 'http://222.139.94.187:45764/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5225f8d6-6b99-d84b-b2bb-0000ea13b38c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.4.180:60816/i","pattern":"[url:value = 'http://42.179.4.180:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde6d48f-2422-19d9-26ee-0000b2225e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/bin.sh","pattern":"[url:value = 'http://42.235.171.234:44993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a416b4-dd53-a84d-c447-0000fb02c15c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/i","pattern":"[url:value = 'http://60.184.140.145:34890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3633620d-34c6-80f6-6082-000014b5bef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/i","pattern":"[url:value = 'http://42.85.28.108:53934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3dd1e0-7b6a-2c7f-5627-00009ddf2d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.15.53:45156/bin.sh","pattern":"[url:value = 'http://42.54.15.53:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a136c67-6167-444b-d60d-0000f418fd14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/i","pattern":"[url:value = 'http://42.52.206.146:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf522c73-85c9-191f-566d-00001e95c81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/bin.sh","pattern":"[url:value = 'http://196.188.75.58:44319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb90b9a-cf6f-5ec3-548f-000055bbaaf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.163.85.239:39124/bin.sh","pattern":"[url:value = 'http://45.163.85.239:39124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d064785-1bbe-5f4c-f548-000045d3e07f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/bin.sh","pattern":"[url:value = 'http://42.52.206.146:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ebe9ee7-5d4c-5cd9-c72f-00009bc0ba1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.15.53:45156/i","pattern":"[url:value = 'http://42.54.15.53:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73854b15-dcbd-bdf1-32d4-000060c4c527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/bin.sh","pattern":"[url:value = 'http://182.130.209.58:35031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dd4793-7a1a-7ac6-0eeb-00004c7934aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.127.49.161:56955/bin.sh","pattern":"[url:value = 'http://222.127.49.161:56955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990be191-597c-7c32-68b4-0000d8108cd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/bin.sh","pattern":"[url:value = 'http://91.234.61.90:34549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50180be2-8494-f636-a109-0000ae8800ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/bin.sh","pattern":"[url:value = 'http://42.85.28.108:53934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368437bf-15a8-ceef-db98-000040a61bb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.49.161:56955/i","pattern":"[url:value = 'http://222.127.49.161:56955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd209f27-677d-1de9-2b82-000004c3a32b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/i","pattern":"[url:value = 'http://91.234.61.90:34549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e80f53-0da7-1d40-8487-0000b3c5a376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.26.85:51916/bin.sh","pattern":"[url:value = 'http://42.5.26.85:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61125e88-6d82-9a39-dedc-0000ccd10e65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:47551/i","pattern":"[url:value = 'http://196.189.130.28:47551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1301fa-dc08-e4e8-afe0-0000d180c369","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/bin.sh","pattern":"[url:value = 'http://42.87.111.88:33491/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed3b46d-9cd7-03b0-7981-00002b0af5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/bin.sh","pattern":"[url:value = 'http://42.235.140.235:50010/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeebacfa-66ed-872f-c242-0000794f7b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.75.38.154:4194/i","pattern":"[url:value = 'http://211.75.38.154:4194/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dac89b7-ebf1-020b-6d68-000001466187","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/i","pattern":"[url:value = 'http://42.235.140.235:50010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c24dccf-1f6e-869b-7800-00007f0bfa2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/i","pattern":"[url:value = 'http://42.235.171.234:44993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7861352-c61e-0824-e4ea-0000fe7ad820","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.148.182:60566/i","pattern":"[url:value = 'http://42.239.148.182:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9e13af-bb48-08f2-3320-0000500aa0a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.178.45.124:57472/i","pattern":"[url:value = 'http://42.178.45.124:57472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3039d9c9-3637-1f34-37f1-000065f71e0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/i","pattern":"[url:value = 'http://183.159.187.179:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd33ae32-ec02-f460-d24e-00005ccd84fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/bin.sh","pattern":"[url:value = 'http://183.159.187.179:34226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717b29e-4ffe-894a-2967-000056db997e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.38.16.176:54968/i","pattern":"[url:value = 'http://78.38.16.176:54968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7639b0db-2cfc-f7d5-0e94-0000ce6ab9b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.21.251.3:42743/bin.sh","pattern":"[url:value = 'http://58.21.251.3:42743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f296bfd6-9cfd-71d6-0c5e-0000074388d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.136.165:55956/i","pattern":"[url:value = 'http://59.180.136.165:55956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e0b4c0-43fb-d07d-df68-0000457a5a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/bin.sh","pattern":"[url:value = 'http://182.244.41.109:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae6e86-6cd5-e95b-b133-0000dbdeead0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/i","pattern":"[url:value = 'http://125.45.10.162:57743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdc6276-91cb-d974-a9b6-00007ca4c639","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.224.231:49757/i","pattern":"[url:value = 'http://123.10.224.231:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c9c52a-a1c5-895e-03f1-00009599df24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/bin.sh","pattern":"[url:value = 'http://42.235.49.187:35712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e39d7fc-9264-b13b-1760-0000d9d414d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.202/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6ecaaa-09fe-e369-3032-0000bb86eea8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.202/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3f8d91-0ce7-b78d-23ac-000030ec5c19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd5cac5-c723-edd8-b034-0000a4be08b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8705b98c-dc08-5dff-7624-0000593446b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.i486","pattern":"[url:value = 'http://176.65.139.202/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f91fc6-8f34-51a2-61ec-0000686feb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.arc","pattern":"[url:value = 'http://176.65.139.202/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f3ed90-b9bc-e18d-4612-0000c601d3a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/a.sh","pattern":"[url:value = 'http://176.65.139.202/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c795654-fe26-16b0-de41-00005afbf084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.202/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e3409-f867-8012-b146-0000ea87c10d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee3a847-c12f-2444-7947-0000de7e5bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665997f6-00ee-c34c-6355-00006988bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.202/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f89906-523a-467c-2379-0000e31e7266","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5215e32a-b773-3f56-a002-0000d922c20e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mips","pattern":"[url:value = 'http://176.65.139.202/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cefb84-fcf6-8bf0-9eb2-000099de2106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e661d8-3afe-2b75-dee4-000042633ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.202/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a689a64-6820-bfbf-b338-0000736fadc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/bin.sh","pattern":"[url:value = 'http://125.47.59.152:33986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7083b5aa-76a6-aa3f-dd57-0000cd9a150f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/bin.sh","pattern":"[url:value = 'http://124.234.219.153:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39c0f91-0a3a-f8d6-48b4-00007686542a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/i","pattern":"[url:value = 'http://42.235.49.187:35712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68636258-706b-a736-5711-000015a90309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/bin.sh","pattern":"[url:value = 'http://123.132.182.114:59660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736cc10b-6c21-01eb-f7b2-00006ec66140","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/i","pattern":"[url:value = 'http://125.47.59.152:33986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11222c30-e92b-4331-6499-00003c4c8a65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.228.140.10:33110/i","pattern":"[url:value = 'http://113.228.140.10:33110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f49cc-aca5-b17e-e660-0000ab1b8280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c83d114-4138-2bc2-1e50-000003cb689a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/i","pattern":"[url:value = 'http://123.132.182.114:59660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21d4aa0-b7b6-e8ba-6453-0000449ed36a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/i","pattern":"[url:value = 'http://42.231.79.131:52303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58e78b1-0c3a-6a6d-1111-0000dd0c8ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.sh4","pattern":"[url:value = 'http://94.154.43.181/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b4184f-280b-6a12-21f7-0000c1a760c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm7","pattern":"[url:value = 'http://94.154.43.181/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc8f1f0-b17c-d930-415f-0000d9aaaccc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mipsel","pattern":"[url:value = 'http://94.154.43.181/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0dc9ae6-522f-67d2-3952-00005dd21513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.ppc","pattern":"[url:value = 'http://94.154.43.181/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0761ebbe-9a5c-a6ce-3b55-0000bc89ed5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.aarch64","pattern":"[url:value = 'http://94.154.43.181/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54588c3b-8617-5797-262f-00002ece410a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.i686","pattern":"[url:value = 'http://94.154.43.181/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b61c24-77d4-f330-5cc2-00000f47e07e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm","pattern":"[url:value = 'http://94.154.43.181/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1aeeb97-adb5-eb42-d8c4-000080ce4ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.x86_64","pattern":"[url:value = 'http://94.154.43.181/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cc02f3-6f97-b8e2-8e16-0000e31064bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mips","pattern":"[url:value = 'http://94.154.43.181/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9321d318-0659-cc0d-1ac2-0000003f3177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/adbpersist.arm7","pattern":"[url:value = 'http://94.154.43.210/adbpersist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3896cf5d-2fc9-e263-ca4f-0000c51c0585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/ppc","pattern":"[url:value = 'http://94.154.43.210/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17446498-b975-1820-4de9-0000775687db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arc","pattern":"[url:value = 'http://94.154.43.210/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aff381e-6013-efb5-3b90-0000d85398a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm7","pattern":"[url:value = 'http://94.154.43.210/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8722a2-1d63-ceda-9ed6-0000fae49cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mips","pattern":"[url:value = 'http://94.154.43.210/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df80888-4297-34be-29ae-000060efffcd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm6","pattern":"[url:value = 'http://94.154.43.210/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc42d0a-9a7c-a62a-96df-000045c29c73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/sh4","pattern":"[url:value = 'http://94.154.43.210/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fc499f-2197-381c-5a74-00009789f0e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm","pattern":"[url:value = 'http://94.154.43.210/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b55e46b-43f3-9dee-9c9d-000091e7f297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mpsl","pattern":"[url:value = 'http://94.154.43.210/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ab1674-2e43-c5c5-80a9-0000fa124a07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/m68k","pattern":"[url:value = 'http://94.154.43.210/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80102f9b-b553-25bd-b037-00000a9b3a36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/i","pattern":"[url:value = 'http://36.70.235.87:40268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad07104-da1d-67cd-4754-00004388772b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/spc","pattern":"[url:value = 'http://94.154.43.210/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f15932-47c4-9fd7-8d7c-0000725a5023","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm5","pattern":"[url:value = 'http://94.154.43.210/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9aca7b-a040-039d-3516-00008d1d875b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mips","pattern":"[url:value = 'http://94.154.43.85/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff1d4b1-dee5-296a-500f-00001f0413e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv6l","pattern":"[url:value = 'http://94.154.43.85/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c0e44b3-1304-81da-9d19-000040c3a2ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/i686","pattern":"[url:value = 'http://94.154.43.85/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2df167-4ea1-0fb6-1a81-0000f1961428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mipsel","pattern":"[url:value = 'http://94.154.43.85/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6eae5f0-1431-e5f5-9e28-000022643a57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv7l","pattern":"[url:value = 'http://94.154.43.85/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e808e3fc-9d7f-6528-537c-00003320e7ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/amd64","pattern":"[url:value = 'http://94.154.43.85/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ea3215-f324-189b-f61b-000043347bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/x86","pattern":"[url:value = 'http://94.154.43.85/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b4c409-fb32-f60d-ace3-0000983d1bec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/ppc64","pattern":"[url:value = 'http://94.154.43.85/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc8772-22cc-ec12-cc6e-000058a46937","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv5l","pattern":"[url:value = 'http://94.154.43.85/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fda927f-861a-0982-88c3-00008eaab9be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.53.157:42588/Mozi.a","pattern":"[url:value = 'http://39.61.53.157:42588/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c757a2-9fba-613d-cc83-0000de7050e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/bin/support.client.exe","pattern":"[url:value = 'http://203.159.90.118/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7780072-3bba-2f06-3d24-0000fddd0049","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d85783f-5429-cf0d-daa5-0000a17563cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/bin/support.client.exe","pattern":"[url:value = 'http://192.159.99.42/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44488e7b-e8c8-8e87-2bd3-000071d5be3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb652e09-894c-2c18-27c3-0000cd78e211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cfa1bf-5c9d-40ba-6323-000086b3aea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e0207d","pattern":"[url:value = 'http://5.182.210.174/e0207d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf135bc-ce79-43f2-785f-000050b942bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d81575","pattern":"[url:value = 'http://5.182.210.174/d81575']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1841a6b-ce26-046d-5236-0000ea0cdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14f97a","pattern":"[url:value = 'http://5.182.210.174/14f97a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5b0dac-1105-c5c6-88ee-00006d0317b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c02601","pattern":"[url:value = 'http://5.182.210.174/c02601']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6806881-60d8-0c39-d130-0000541d5660","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61e952","pattern":"[url:value = 'http://5.182.210.174/61e952']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780c51b9-1bdf-6890-35fe-000094efa077","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/005679","pattern":"[url:value = 'http://5.182.210.174/005679']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884b6749-8007-e23d-aa91-0000408f9611","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98fab6","pattern":"[url:value = 'http://5.182.210.174/98fab6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2820f8a2-c159-4cb9-534f-0000c98187f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/829f73","pattern":"[url:value = 'http://5.182.210.174/829f73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6f93b9-96a8-7dca-4d98-0000b99825dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://v-k.com.ua/vcapcha.ps1","pattern":"[url:value = 'http://v-k.com.ua/vcapcha.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515e4aa1-3c0d-fcf1-bbce-0000aa89a9d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/197001","pattern":"[url:value = 'http://5.182.210.174/197001']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d0215-573e-152c-6133-0000f2194b87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70504f","pattern":"[url:value = 'http://5.182.210.174/70504f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39cc98c-4c1b-2d3e-886b-0000ffd814c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2cd0c9","pattern":"[url:value = 'http://5.182.210.174/2cd0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449232b6-0c12-daff-9322-0000c6d46151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0eede3","pattern":"[url:value = 'http://5.182.210.174/0eede3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c45bb50-f452-8c76-3b4b-0000994da93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11700068-bbd4-43ef-8219-0000e2b7ae1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/bin/support.client.exe","pattern":"[url:value = 'http://94.154.32.180/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78b3582-b929-1a12-855b-0000ce9c12f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bce7e5-8d5c-044f-e14c-000088b7cd9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.68/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a980d5-46c6-c5c5-953c-0000ebbd31e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4949a4-3d85-ffcd-ab8c-000004bcbd77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.205/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaac499-74a8-7445-ed96-00009f219ed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acba074c-8c06-709c-6edd-0000e903fdf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.55.26.114:46700/i","pattern":"[url:value = 'http://116.55.26.114:46700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dab7761-96b3-a8f2-fe44-00009c197185","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/i","pattern":"[url:value = 'http://105.225.189.234:48747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfaa030-74cc-a329-612e-000023720718","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.94.220:54475/i","pattern":"[url:value = 'http://163.142.94.220:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c582fa-9e2e-bc6a-8c1f-0000ae9e7f79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/bin.sh","pattern":"[url:value = 'http://182.116.20.246:39870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a59358-37de-872f-990d-00006a09b410","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.54.109/spamget.exe","pattern":"[url:value = 'http://178.16.54.109/spamget.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91a6ddd-c977-551e-6576-00005c160ff4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/bin.sh","pattern":"[url:value = 'http://222.142.244.196:59371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817c1070-8795-daef-1a30-0000b3f60239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/Mozi.a","pattern":"[url:value = 'http://113.228.208.46:56903/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a81c22-a409-dc34-d0f3-0000f1c5a165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.144.211:51836/bin.sh","pattern":"[url:value = 'http://59.180.144.211:51836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8340af0a-5e7a-ea8e-6632-0000a6a2214d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/i","pattern":"[url:value = 'http://222.142.244.196:59371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deccde2-696b-307f-ef28-000089f8462d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.237.221:39602/i","pattern":"[url:value = 'http://125.42.237.221:39602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce9a0b0-2401-ee14-7492-000046f95d17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.87.19:46712/bin.sh","pattern":"[url:value = 'http://163.142.87.19:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e534a33-1ad5-ae69-23a1-00002aafb928","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.230:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11157509-3a91-e1a2-4898-0000c4321768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/i","pattern":"[url:value = 'http://46.236.65.230:33052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd350540-90bb-16ac-945d-0000af28f8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/bin.sh","pattern":"[url:value = 'http://61.52.158.83:45555/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5656b29-25b3-adfd-9fb3-0000783b1faf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.46.143:53645/bin.sh","pattern":"[url:value = 'http://39.61.46.143:53645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b31cd-791a-6880-b45f-000021398ef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/bin.sh","pattern":"[url:value = 'http://115.194.179.106:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253d5e53-45db-3d20-6b66-0000e6dce9a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/i","pattern":"[url:value = 'http://42.59.235.202:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c7ff8c-b4a3-81c1-ee85-00008a7d0d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.178.159:48639/i","pattern":"[url:value = 'http://115.201.178.159:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--557f1a91-1869-c8af-6868-00007830014a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/i","pattern":"[url:value = 'http://61.52.158.83:45555/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac30290-45ba-9060-2432-0000393e0cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/i","pattern":"[url:value = 'http://115.194.179.106:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475a98da-e61b-e8d5-480e-0000464e4df7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.4.254.241:52598/bin.sh","pattern":"[url:value = 'http://31.4.254.241:52598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1777cdf5-27d7-60e0-7307-0000f74cb91e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://117.26.82.102:41542/i","pattern":"[url:value = 'http://117.26.82.102:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05683afb-74b1-e720-3f44-00002b27ee89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.251.126:60468/bin.sh","pattern":"[url:value = 'http://61.137.251.126:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86d8555-b6a2-7fac-ddc8-0000ebf6d8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.112.59.91:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.91:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166d6296-6567-2846-0443-00006920953a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.251.126:60468/i","pattern":"[url:value = 'http://61.137.251.126:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063f5e7f-4a0e-6fb1-c605-000039853722","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://68.168.20.218:18081/f8YlUiZDcEOZ","pattern":"[url:value = 'http://68.168.20.218:18081/f8YlUiZDcEOZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb7bd1b-b77d-6373-36cf-0000e06bffce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/bin.sh","pattern":"[url:value = 'http://115.49.64.122:48159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242db813-ebac-212d-bd65-000083d52066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.91:60395/i","pattern":"[url:value = 'http://125.112.59.91:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f03eda-a4f4-7f5b-9e7e-000088101c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/i","pattern":"[url:value = 'http://115.49.64.122:48159/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138a9e34-9a8a-b977-2f1b-000035bbc55b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.94:37532/bin.sh","pattern":"[url:value = 'http://113.221.25.94:37532/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8617ae2f-f05a-8728-3d31-000074305055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60afb36-c283-98d2-68b6-0000c30d0d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/bin.sh","pattern":"[url:value = 'http://124.131.166.85:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4c5035-11a9-0776-6be1-0000130732d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/i","pattern":"[url:value = 'http://124.131.166.85:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a58de8-fd36-0b60-fd0e-00007b167566","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/i","pattern":"[url:value = 'http://58.208.16.203:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36cd8ed-ac4b-615c-9c7a-000058a9648a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/bin.sh","pattern":"[url:value = 'http://58.208.16.203:3588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebbc599-e894-6c1f-565b-0000ec8a8fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.60.37:49335/i","pattern":"[url:value = 'http://175.173.60.37:49335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cb8e-ac9a-9275-e71e-0000b400f8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.243.79:60816/i","pattern":"[url:value = 'http://175.147.243.79:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c8a6fb4-4ad0-f9d9-76c5-0000d9290e78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/i","pattern":"[url:value = 'http://182.116.51.119:37449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0faedb9-76ea-6b48-72dd-000088411632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/bin.sh","pattern":"[url:value = 'http://182.116.51.119:37449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834af59-7bc4-e5ac-81c6-00009f30043a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/bin.sh","pattern":"[url:value = 'http://220.192.234.145:55381/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1230ac04-dad8-e224-1347-0000d7142e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/i","pattern":"[url:value = 'http://220.192.234.145:55381/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76de7735-a2d9-8dc5-1a71-0000d7c37241","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/bin.sh","pattern":"[url:value = 'http://42.177.103.199:46495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2d0abb-69a2-a901-a45e-0000824de02b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/i","pattern":"[url:value = 'http://42.177.103.199:46495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3926464-2b3e-1cee-398b-0000a4387a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325591.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325591.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35de0067-e5c3-cd97-0d84-0000d88567ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/bin.sh","pattern":"[url:value = 'http://85.15.117.156:37936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834bc3a-f6dc-3338-697d-0000b44e30d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/bin.sh","pattern":"[url:value = 'http://222.138.117.213:54917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c5946-6023-33f4-b20e-0000c4772e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/i","pattern":"[url:value = 'http://222.138.117.213:54917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174f0547-f74c-59a9-f021-00001ab776b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/i","pattern":"[url:value = 'http://85.15.117.156:37936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bb507-4565-9eeb-6864-000012e1534f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/bin.sh","pattern":"[url:value = 'http://123.8.162.45:59164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69134f98-5260-891d-37bf-0000f429be9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.177.126:57685/i","pattern":"[url:value = 'http://175.150.177.126:57685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7457757-a839-57db-d828-0000fb4d2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-04.cfd/installer.exe","pattern":"[url:value = 'https://mon-blanc-04.cfd/installer.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4783db32-b142-ed48-371d-0000c5e4ba59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/bin.sh","pattern":"[url:value = 'http://105.158.197.238:53233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7482c5-d825-b558-99f1-00003dcf5e27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.60.89:60712/i","pattern":"[url:value = 'http://112.248.60.89:60712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e401b04-18af-26b8-7d03-00002c956726","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7154708060/EcHFKBJ.exe","pattern":"[url:value = 'http://62.60.226.140/files/7154708060/EcHFKBJ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223ea20e-5d90-0e67-7dd8-0000a3b8ab46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/i","pattern":"[url:value = 'http://105.158.197.238:53233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5829898-a4ed-4781-fdb4-0000bd584e3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/bin.sh","pattern":"[url:value = 'http://123.8.30.116:41163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e629510-9fd0-54cd-67b3-000047da98bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/bin.sh","pattern":"[url:value = 'http://179.108.90.55:37440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ccc8b3-4d4c-23f4-784e-0000a29fd64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/i","pattern":"[url:value = 'http://123.8.30.116:41163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1df21c5-f323-5ede-6970-0000f9e1cb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/6680549914/ENKpzg6.exe","pattern":"[url:value = 'http://62.60.226.140/files/6680549914/ENKpzg6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd87431-b188-9bfb-d15b-000012842cb2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.163.131:49762/i","pattern":"[url:value = 'http://182.120.163.131:49762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f767f3d-fc8a-7a7b-de66-0000c9048232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/i","pattern":"[url:value = 'http://179.108.90.55:37440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35f1270-4aae-42e0-e78a-000023a7119b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.127.198:37040/i","pattern":"[url:value = 'http://113.231.127.198:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddc8f5c-3700-a5be-87e5-0000a2ae88fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/i","pattern":"[url:value = 'http://221.15.214.165:40665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfc913b-d67d-20eb-158f-000000194ac8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.183.167:47451/i","pattern":"[url:value = 'http://42.235.183.167:47451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2fc298-d0e0-aa1f-c48d-0000556b24d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/bin.sh","pattern":"[url:value = 'http://123.132.158.53:41696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efaa86af-ed78-3a49-f12b-00007d882a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/bin.sh","pattern":"[url:value = 'http://182.116.20.77:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c785932c-910b-ae8b-f3c1-0000029f549b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.228.132.133:38637/i","pattern":"[url:value = 'http://114.228.132.133:38637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32526d2-b978-9549-2350-0000f2a1f370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/i","pattern":"[url:value = 'http://123.132.158.53:41696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d335f7-ba13-c6aa-6b41-0000f91661b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/bin.sh","pattern":"[url:value = 'http://116.138.108.78:35117/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91754006-d314-cdff-28ee-000020edf33b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/i","pattern":"[url:value = 'http://42.225.15.213:35530/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbc0749-0d57-250b-4dd7-000006ab9adc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.227.126:60165/i","pattern":"[url:value = 'http://182.119.227.126:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d8f92-c028-5456-9a02-000025f352a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/i","pattern":"[url:value = 'http://182.116.20.77:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edd1a1-0d8f-dc12-cf3c-00006a541896","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/i","pattern":"[url:value = 'http://116.138.108.78:35117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f9a63-e8a5-4ff1-2a00-00009e986fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/bin.sh","pattern":"[url:value = 'http://115.54.128.38:41331/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8593c6e-ee24-3363-9aff-0000d77b33e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/bin.sh","pattern":"[url:value = 'http://123.7.223.208:48157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2e4b2c-5513-c7a7-2d50-00000a7a6175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/i","pattern":"[url:value = 'http://123.7.223.208:48157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4457a0-3c9c-592a-ed06-0000a945560e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/i","pattern":"[url:value = 'http://115.54.128.38:41331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096c1797-12b0-1e63-6294-00004dad4237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.94.45:36545/bin.sh","pattern":"[url:value = 'http://163.142.94.45:36545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c44446c-5960-c3d8-2e2f-0000501f782e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/bin.sh","pattern":"[url:value = 'http://115.49.210.219:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efbd282-d97d-fd90-9d23-00008fa60617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/i","pattern":"[url:value = 'http://115.49.210.219:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02502118-d700-1de8-3396-000001b7f373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.4.17.29:54916/i","pattern":"[url:value = 'http://42.4.17.29:54916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81237645-6028-d71b-5745-00005925a506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/i","pattern":"[url:value = 'http://222.136.52.188:32973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eaa7e07-ac46-02c5-692f-000076864dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i586","pattern":"[url:value = 'http://222.223.152.97:800/m.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d08b965-b8e7-1d84-5396-000081b6d12b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.powerpc","pattern":"[url:value = 'http://222.223.152.97:800/m.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f681430-1388-fc6f-92fa-0000bdda9e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i486","pattern":"[url:value = 'http://222.223.152.97:800/m.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef41ecb-13a0-7cdd-4ba1-0000071d352b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv6l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef2f8a-7925-9f3f-48d3-00003a7d1c9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv7l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc27c49-65da-f4b1-81a3-00007ddd664b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv4l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864e217a-defd-1245-4695-0000b0ebd1da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.x86_64","pattern":"[url:value = 'http://222.223.152.97:800/m.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cecc05e-fa4e-98a2-9248-0000f0123f05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i686","pattern":"[url:value = 'http://222.223.152.97:800/m.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da784e96-556f-32df-36e6-00003dcc1ab3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mips","pattern":"[url:value = 'http://222.223.152.97:800/m.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2254f50-41c5-0d42-9682-0000a42fec71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/lilin.sh","pattern":"[url:value = 'http://222.223.152.97:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d94d08-91a1-ec0b-b664-000040bd4ffb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv5l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab283b1d-b4c2-ddf1-17a2-0000e98f32e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mipsel","pattern":"[url:value = 'http://222.223.152.97:800/m.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970517c5-c7cb-c0cd-c37b-000016fb618b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/wget.sh","pattern":"[url:value = 'http://222.223.152.97:800/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e34f6c-5c2c-84e6-b796-0000fb599730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.199.146:39260/i","pattern":"[url:value = 'http://182.114.199.146:39260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a704de-42a3-4618-9e69-00005fbfae08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/bin.sh","pattern":"[url:value = 'http://182.119.205.237:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f40afb-8663-afb6-0a13-00000dd807d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/bin.sh","pattern":"[url:value = 'http://125.46.213.70:33401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d515a2d-0cfb-7d9f-31a9-000098db44ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/i","pattern":"[url:value = 'http://182.119.205.237:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dede4-4db9-9bf9-96fe-0000824eadf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.93.152:51284/i","pattern":"[url:value = 'http://163.142.93.152:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffbb0c1-b888-6dc8-88c5-0000aab13c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/bin.sh","pattern":"[url:value = 'http://123.189.148.227:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0152cd6c-3599-5de4-1e8b-00004e8aee30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/bin.sh","pattern":"[url:value = 'http://103.172.221.97:35084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700ae5ff-4912-405a-0535-000089329f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/i","pattern":"[url:value = 'http://123.189.148.227:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5cd5c-df11-3520-eb74-00003fe42d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/i","pattern":"[url:value = 'http://61.54.190.223:33351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cc92c3-dd5a-20d7-9d99-0000b63a0b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/i","pattern":"[url:value = 'http://103.172.221.97:35084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588d5f93-ce5c-5ade-9617-0000a509fd59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/bin.sh","pattern":"[url:value = 'http://42.231.89.132:55455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a2bb-af52-af69-301d-00001f479a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/i","pattern":"[url:value = 'http://42.231.89.132:55455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1c671a-420e-22e4-f799-0000db7ac2ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.231:40959/i","pattern":"[url:value = 'http://27.44.145.231:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d607a526-fc28-3455-4a90-000085a2a225","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.235.239.18:59915/i","pattern":"[url:value = 'http://124.235.239.18:59915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929f7570-ef59-f4d3-5b5e-0000927f2e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.63:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af065966-b569-c78c-a1c9-00003a36b1bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.163.128.185:59951/i","pattern":"[url:value = 'http://61.163.128.185:59951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1875cfe6-4f44-9032-36c9-00003514a796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/bin.sh","pattern":"[url:value = 'http://123.14.96.22:48919/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def9848d-2902-4582-0703-00008615da54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/i","pattern":"[url:value = 'http://123.14.96.22:48919/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03e89ef-4a72-7904-dade-00007de8ec7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.36.172:37655/i","pattern":"[url:value = 'http://42.227.36.172:37655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5212dd-5bcc-cf0f-6dad-00008cb6a3ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/bin.sh","pattern":"[url:value = 'http://113.221.25.59:57666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9bcc0df-4640-d518-b62a-00007b8e1f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/i","pattern":"[url:value = 'http://183.188.77.45:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8ba468-7301-8ec3-0afd-000002b3fc5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/.bash_history","pattern":"[url:value = 'http://150.241.65.80:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2a6193-93fe-f396-d106-0000ac7ed0ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://faceit-anti-cheat.com/notify.ps1","pattern":"[url:value = 'http://faceit-anti-cheat.com/notify.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac279d0-8ed9-4c38-1a88-0000f26811a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/i","pattern":"[url:value = 'http://113.221.25.59:57666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b092ea7-d86c-331d-1d14-00005a9abfb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://soft-update.dev/get_verify?i=66695","pattern":"[url:value = 'https://soft-update.dev/get_verify?i=66695']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6d1da3-261b-ba5c-44b4-0000e327d7a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Drastok.application","pattern":"[url:value = 'https://drastok.xyz/installer/Drastok.application']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3442905-c2e8-5742-0a92-0000c74a9dc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://auth2api.site/API_REFRESH.scpt","pattern":"[url:value = 'https://auth2api.site/API_REFRESH.scpt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44a594c-f2ea-4c43-81da-000070867f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.54.25.213/d/unix49211821","pattern":"[url:value = 'http://86.54.25.213/d/unix49211821']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d7f22b-061a-b3ea-bc40-0000fe532823","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy","pattern":"[url:value = 'https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeda948-7848-6fa9-b767-00002b81000c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/gg11","pattern":"[url:value = 'http://150.241.65.80:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a8d82a-8e2e-9236-57d7-00005040e2d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF","pattern":"[url:value = 'https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff8b0a3-ae8a-f52c-909d-000078eb720e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67eefd","pattern":"[url:value = 'http://5.182.210.174/67eefd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32127dfb-aa9b-da06-a7e5-000024cfaf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d9d6f9","pattern":"[url:value = 'http://5.182.210.174/d9d6f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddbe3b1-515e-d082-e462-000054b87af7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20302a69-377a-c30b-49f4-0000fac249a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b85c0","pattern":"[url:value = 'http://5.182.210.174/2b85c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba776bd-9027-3f75-18f6-00000827c06d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2c07b9","pattern":"[url:value = 'http://5.182.210.174/2c07b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0856071-eda2-8ec1-5269-0000596a5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d95abb","pattern":"[url:value = 'http://5.182.210.174/d95abb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59617dd3-5ef4-927a-4eba-0000db9d98eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/334215","pattern":"[url:value = 'http://5.182.210.174/334215']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86db2a11-1065-e201-6f7a-000097f84b1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7c899f","pattern":"[url:value = 'http://5.182.210.174/7c899f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e2f716-6d0d-d61f-142e-0000f9246e51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5adf18","pattern":"[url:value = 'http://5.182.210.174/5adf18']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9209980-7d5d-dd87-bd2a-00008eae4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f6f76d","pattern":"[url:value = 'http://5.182.210.174/f6f76d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--689836ba-7916-4d47-f178-00004b77b403","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da8d2e","pattern":"[url:value = 'http://5.182.210.174/da8d2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff844d2-0797-8fec-8276-00005d085400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9922af","pattern":"[url:value = 'http://5.182.210.174/9922af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d0aa27-e5ef-d656-ae9c-00001b4f9355","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/http","pattern":"[url:value = 'http://5.182.210.174/http']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669e796f-3e43-2587-e297-00005eb7b529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9b83","pattern":"[url:value = 'http://5.182.210.174/9c9b83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2db887a-2612-4057-7ea8-00004f4bb1f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227:8080/bot.x86_64","pattern":"[url:value = 'http://94.154.43.227:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dadf802-b570-67e2-686a-000083f0257d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.239.124.108/atomic/main_x86_64","pattern":"[url:value = 'http://77.239.124.108/atomic/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab05cc-757d-8def-4df7-000050b0a42c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pawsockenjoyer.site/z7/webhook","pattern":"[url:value = 'https://pawsockenjoyer.site/z7/webhook']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7353fbef-76f3-60f4-363f-000053e2ea78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc3.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc3.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a26f36-9487-6ebd-ee28-00000e2d69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/bin.sh","pattern":"[url:value = 'http://182.122.199.106:34085/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84675f50-2375-8fb9-55c0-0000763fdefa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/bin.sh","pattern":"[url:value = 'http://125.41.75.183:52478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e652f9-ac49-79c4-b88b-00008f87758b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.190:54106/i","pattern":"[url:value = 'http://115.48.146.190:54106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcccfa2-7f51-78f1-d07c-0000f03a8917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/bin.sh","pattern":"[url:value = 'http://61.52.45.140:49405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f0701a-e2a0-87d8-db22-00007745e854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/i","pattern":"[url:value = 'http://182.122.199.106:34085/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7c7a30-d565-b39c-6ecf-00005c7e0caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.187:46359/i","pattern":"[url:value = 'http://115.55.130.187:46359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4d5538-18e2-1fc1-6fba-000011af6501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/i","pattern":"[url:value = 'http://125.41.75.183:52478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bbba2a-40bf-e54c-90a1-00008335aa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/bin.sh","pattern":"[url:value = 'http://125.47.87.135:56962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513ac95f-1a3c-4df7-c5e4-00004fa299c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/i","pattern":"[url:value = 'http://61.52.45.140:49405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460b97f-de6e-277f-fe14-0000d36e1ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.145.166:55070/i","pattern":"[url:value = 'http://39.74.145.166:55070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f326b9b-8d73-6359-4c73-00004beef13c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/i","pattern":"[url:value = 'http://27.202.245.161:52186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75eb78f-7035-d7fc-c901-000039485d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/i","pattern":"[url:value = 'http://196.190.105.170:51134/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c4db08-e69f-0e4d-e1eb-000004a00ee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/i","pattern":"[url:value = 'http://125.47.87.135:56962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3011443d-17e8-e8bf-c39a-0000266099ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/bin.sh","pattern":"[url:value = 'http://60.18.84.125:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205939c0-e5d0-e034-5bb2-000079eab724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/i","pattern":"[url:value = 'http://61.163.131.68:44551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67ed39d-87df-1181-aa86-00001c15a43c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5802330c-e11c-bdbd-fa93-0000e709b88e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e3f11-c1f8-b1ce-ec7f-000056f48bd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2999be22-3fb6-e224-74ed-00003c2a7fdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/bin.sh","pattern":"[url:value = 'http://222.127.53.189:47969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422bfd00-22ca-9873-5f8c-0000f9d8235c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1787387436870.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1787387436870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafed242-8324-af35-5195-00006e63645c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.75.158:39827/i","pattern":"[url:value = 'http://123.173.75.158:39827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9709d526-fea8-1e05-962a-00004d25f695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/bin.sh","pattern":"[url:value = 'http://222.137.147.215:41949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4241acdf-1b88-1d20-d02f-000071cab502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/i","pattern":"[url:value = 'http://222.127.53.189:47969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e8a150-9803-a6d4-aeea-000081078c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://practisingcertificateprotection.com/Installer_91473f.msi","pattern":"[url:value = 'https://practisingcertificateprotection.com/Installer_91473f.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c96ca5-829c-6d56-40dd-0000003584e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlcc.zip","pattern":"[url:value = 'https://kee126.com/vlcc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b90eb3-8bed-3f47-5a09-00001f502307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827302ec-5760-6e26-615b-0000afb42eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.183.90:33830/i","pattern":"[url:value = 'http://123.14.183.90:33830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f5319f-4c66-9313-5666-000009b3bb4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20fbae","pattern":"[url:value = 'http://5.182.210.174/20fbae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78efa237-2ab4-4b08-d47b-000079d69741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/374166","pattern":"[url:value = 'http://5.182.210.174/374166']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9094d3-bd37-ad48-62eb-00009e9b1221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9f0d8c","pattern":"[url:value = 'http://5.182.210.174/9f0d8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7658d761-21a6-7a39-6a1e-000016aa6ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/bin.sh","pattern":"[url:value = 'http://115.50.157.21:42304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88726f60-49b4-e2d4-c359-0000e0cfe97e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4878f","pattern":"[url:value = 'http://5.182.210.174/c4878f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec1070b-a347-b706-2ada-00005b01ce30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1416b6","pattern":"[url:value = 'http://5.182.210.174/1416b6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db5cc07b-704a-87a6-8ce9-000005f50855","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da703f","pattern":"[url:value = 'http://5.182.210.174/da703f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281153c5-40db-e41c-1f34-000098343f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45d4ef","pattern":"[url:value = 'http://5.182.210.174/45d4ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d68a1fe-6695-24ee-dba4-0000bf597fdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79d8a6","pattern":"[url:value = 'http://5.182.210.174/79d8a6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669c6c-6b80-d5e6-fa1a-0000cc9e760f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1f4418","pattern":"[url:value = 'http://5.182.210.174/1f4418']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4480d5e-a08a-098b-4eb8-00005ffdf15f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9bf687","pattern":"[url:value = 'http://5.182.210.174/9bf687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e5b40b-dd75-d7fb-fd4d-0000a8ead72d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/40ab6b","pattern":"[url:value = 'http://5.182.210.174/40ab6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6079f87-5636-b676-8620-000078b14b6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f653ed","pattern":"[url:value = 'http://5.182.210.174/f653ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3ad684-ce91-819b-e86a-000003244dc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69e5eb","pattern":"[url:value = 'http://5.182.210.174/69e5eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94065ad8-2cff-ebc8-3a32-0000dedb3159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/75fa66","pattern":"[url:value = 'http://5.182.210.174/75fa66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4adcdb-b3ff-399d-3e0e-0000ce2ebd9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3d5609","pattern":"[url:value = 'http://5.182.210.174/3d5609']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d519c0-3d19-5dd3-f1c1-000008605cec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/abcfc3","pattern":"[url:value = 'http://5.182.210.174/abcfc3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e720570-50f6-49d3-9ec1-000063fbc925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b69b69","pattern":"[url:value = 'http://5.182.210.174/b69b69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a901cd2-fb7c-be11-b52b-00006c036a63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7252a4","pattern":"[url:value = 'http://5.182.210.174/7252a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee7f8a9-cf63-219c-1561-0000c0d43f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/805ade","pattern":"[url:value = 'http://5.182.210.174/805ade']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a772c84-bece-ee09-d510-0000e51a7949","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f3158a","pattern":"[url:value = 'http://5.182.210.174/f3158a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a386f47-f609-0c57-3140-00004bc41157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20c791","pattern":"[url:value = 'http://5.182.210.174/20c791']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6f09e0-caac-b10b-95b1-0000515b5244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67dfb1","pattern":"[url:value = 'http://5.182.210.174/67dfb1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68204b06-cd2b-71d1-1ec9-0000d8188f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/140cef","pattern":"[url:value = 'http://5.182.210.174/140cef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44da711-98c1-4a9d-c829-000000b99b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/810904","pattern":"[url:value = 'http://5.182.210.174/810904']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec421a1e-902f-c8d5-1a88-0000ca31115f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e8090c","pattern":"[url:value = 'http://5.182.210.174/e8090c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e6befb-1acf-8c65-2c37-00007ec81df5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06d0d9","pattern":"[url:value = 'http://5.182.210.174/06d0d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc68e169-26bf-0841-2edb-0000b77c9e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a84a56","pattern":"[url:value = 'http://5.182.210.174/a84a56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6576fa6-503f-fe95-aad8-00003ee9d785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/766551","pattern":"[url:value = 'http://5.182.210.174/766551']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f954a7-a887-2da0-0a23-000032f7dc96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bd742d","pattern":"[url:value = 'http://5.182.210.174/bd742d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96ec1cf-05d5-7dfd-b973-0000166e3e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ceeba2","pattern":"[url:value = 'http://5.182.210.174/ceeba2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdb87a9-c23f-6bde-34a8-0000471c267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/233bc5","pattern":"[url:value = 'http://5.182.210.174/233bc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e13b3f-742e-3c33-a1b3-000030fedab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9ab2df","pattern":"[url:value = 'http://5.182.210.174/9ab2df']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d89eb3c-1076-6774-2612-0000f0e948a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5d1d11","pattern":"[url:value = 'http://5.182.210.174/5d1d11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5927f67-870e-6c7a-b3a6-00000f480fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2509eb","pattern":"[url:value = 'http://5.182.210.174/2509eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326f0910-6c05-c100-52b3-0000e49f216c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d83d","pattern":"[url:value = 'http://5.182.210.174/c5d83d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0951997-074d-a20b-7fd8-0000174f25c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07809e","pattern":"[url:value = 'http://5.182.210.174/07809e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a3ada9-f943-6864-647c-000076a913ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6da58f","pattern":"[url:value = 'http://5.182.210.174/6da58f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca60e55-2600-387c-2d70-00003f37823a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/564fd4","pattern":"[url:value = 'http://5.182.210.174/564fd4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ec58ec-29ef-2554-bbe2-00008f5015ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/592521","pattern":"[url:value = 'http://5.182.210.174/592521']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b118e6-7924-fd84-b6c7-00006764f278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/57965a","pattern":"[url:value = 'http://5.182.210.174/57965a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835749db-f26a-bc6a-db0e-0000a11eafe7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/41308f","pattern":"[url:value = 'http://5.182.210.174/41308f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdc1fb6-1425-b567-f0c2-0000779a57c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7cf768","pattern":"[url:value = 'http://5.182.210.174/7cf768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44212633-0411-46bd-676b-00005dec8d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b2904e","pattern":"[url:value = 'http://5.182.210.174/b2904e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c456ee45-0bae-6c93-5553-0000c0d220e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ea8c29","pattern":"[url:value = 'http://5.182.210.174/ea8c29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d28234-8b1c-b66c-7128-0000b67c41f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21dbf2","pattern":"[url:value = 'http://5.182.210.174/21dbf2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000507f-a3a0-5ab3-ec77-0000116037e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5bf116","pattern":"[url:value = 'http://5.182.210.174/5bf116']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e37b85f-fecb-e007-e6fc-00000737ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/135481","pattern":"[url:value = 'http://5.182.210.174/135481']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13baf4d-9c8e-98f9-5f10-000014a0128e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9cd6a1","pattern":"[url:value = 'http://5.182.210.174/9cd6a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f9836d-a295-0ad0-5fc2-000060b69c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8efbc","pattern":"[url:value = 'http://5.182.210.174/b8efbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367a904d-fcb7-e26b-6b91-00004da54933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1a0da","pattern":"[url:value = 'http://5.182.210.174/a1a0da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a96db6-cd31-d1dc-b9c3-00004afcc9a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/25a617","pattern":"[url:value = 'http://5.182.210.174/25a617']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13adc1d5-a7ba-e5e4-d883-000005b28b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6c8dfb","pattern":"[url:value = 'http://5.182.210.174/6c8dfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8250f9-13c1-354b-7c2b-0000f76eb245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0ab716","pattern":"[url:value = 'http://5.182.210.174/0ab716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39687462-0eea-151b-7c1f-0000b71f0f41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2be985","pattern":"[url:value = 'http://5.182.210.174/2be985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d0015f-a650-498e-c180-00000c5ecf57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/84d632","pattern":"[url:value = 'http://5.182.210.174/84d632']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23c5c3-f2e9-c59a-2524-000073753f45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4fcda","pattern":"[url:value = 'http://5.182.210.174/b4fcda']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4564aa0c-9c7b-22d1-9566-0000e35b4dad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b02922","pattern":"[url:value = 'http://5.182.210.174/b02922']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab1a288-2d4a-597a-42f2-00003b0752fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f76130","pattern":"[url:value = 'http://5.182.210.174/f76130']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622812b4-31c9-947e-6260-00007b60cb29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4f3e29","pattern":"[url:value = 'http://5.182.210.174/4f3e29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adca97b3-828e-af93-4793-000076df3239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b67bf0","pattern":"[url:value = 'http://5.182.210.174/b67bf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c6c5e6-b548-5c70-bf13-00009d93ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/72ab73","pattern":"[url:value = 'http://5.182.210.174/72ab73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89c3af4-f3eb-fcff-aac3-00009aab9f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/662744","pattern":"[url:value = 'http://5.182.210.174/662744']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797719c1-f6c4-4ef3-e76c-0000317af427","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f17409","pattern":"[url:value = 'http://5.182.210.174/f17409']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5eb0c-67d8-945a-5526-00009086801a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21eb07","pattern":"[url:value = 'http://5.182.210.174/21eb07']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defb9db1-df88-2204-0284-0000de6a0e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a10960","pattern":"[url:value = 'http://5.182.210.174/a10960']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa64b86-aff9-a685-3353-00003df6b230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dd08c4","pattern":"[url:value = 'http://5.182.210.174/dd08c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66b624-d1b6-c277-b2e2-0000dd7c66be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/520230","pattern":"[url:value = 'http://5.182.210.174/520230']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a95298b3-700f-c623-b41f-00000f933584","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bf4fde","pattern":"[url:value = 'http://5.182.210.174/bf4fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121d0c30-cce1-fdfb-cc09-00001fae83f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d70921","pattern":"[url:value = 'http://5.182.210.174/d70921']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1c05c3-5a47-bf14-f653-00000ee9c502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f9e3f4","pattern":"[url:value = 'http://5.182.210.174/f9e3f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a5f00-9617-3823-c5ea-00002980ed90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d67e2e","pattern":"[url:value = 'http://5.182.210.174/d67e2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc2112b-ff2f-69b2-2e2f-0000e6dd6c8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e41ded","pattern":"[url:value = 'http://5.182.210.174/e41ded']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f83bb8-7628-8941-03ef-0000b0ef7f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kal64","pattern":"[url:value = 'http://194.59.30.63:56439/b/kal64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d60a54-1ae3-2cb8-319c-00000a9c5c1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/linux","pattern":"[url:value = 'http://194.59.30.63:56439/b/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e6c556-7532-ac6f-c2aa-000063a37399","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kswpad","pattern":"[url:value = 'http://194.59.30.63:56439/b/kswpad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8dcd19-bfd1-88bc-32ec-00000adc8ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/amd64","pattern":"[url:value = 'http://194.59.30.63:56439/b/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f9d92-ca16-2726-189a-00005eb1c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.116.131:52454/bin.sh","pattern":"[url:value = 'http://113.239.116.131:52454/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887b716-4b65-ce89-0f51-00003485b4d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.189.106:45073/i","pattern":"[url:value = 'http://112.248.189.106:45073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d031a72-3679-88bb-ac36-00008a2752cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/i","pattern":"[url:value = 'http://203.101.187.14:53741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873fa158-05f9-d4af-5774-000097a39ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/bin.sh","pattern":"[url:value = 'http://42.177.182.116:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89e5662-522c-df03-4c42-000044731ed9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/bin.sh","pattern":"[url:value = 'http://193.163.187.73:41788/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1c3dfe-b492-875b-5359-000035c50f5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/bin.sh","pattern":"[url:value = 'http://42.228.221.46:33013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59009cb7-b6d7-ddb6-27d7-0000e9936874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/i","pattern":"[url:value = 'http://193.163.187.73:41788/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd2b8cc-9e38-a874-b208-00002802bd5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/bin.sh","pattern":"[url:value = 'http://113.239.64.220:36469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0449540a-15be-e116-4d45-00002836a118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/bin.sh","pattern":"[url:value = 'http://61.163.131.68:44551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67d7846-dfc9-db6b-19e2-000049334a45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/i","pattern":"[url:value = 'http://42.5.254.164:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a310a211-6c71-4bf8-bac0-000068144245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.245.39.127:54225/i","pattern":"[url:value = 'http://43.245.39.127:54225/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defbd05f-4652-ca49-1b0c-000038c1c276","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/i","pattern":"[url:value = 'http://175.107.210.253:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b133e6-f488-7596-e62d-000011140fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/i","pattern":"[url:value = 'http://223.108.82.26:33999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1c5a05-1122-15ea-42e8-0000a6e86e4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/bin.sh","pattern":"[url:value = 'http://223.108.82.26:33999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206caeb4-43ba-a1e3-ac53-000042a1af56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/bin.sh","pattern":"[url:value = 'http://42.231.79.131:52303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ed1af2-3629-58e0-ceb4-00002ca08617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/bin.sh","pattern":"[url:value = 'http://27.202.245.161:52186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428ec8d4-eb5f-1070-bcf7-000077d52b61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/bin.sh","pattern":"[url:value = 'http://203.101.187.14:53741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf36bcaa-b082-9c2b-564a-0000a753e98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/i","pattern":"[url:value = 'http://42.7.217.91:35797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52980d96-0249-14aa-e69f-00004692e485","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/bin.sh","pattern":"[url:value = 'http://196.190.105.170:51134/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53293a6d-733b-f126-ea3d-0000d3625b9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/i","pattern":"[url:value = 'http://45.194.25.221:57073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abae2a79-c3ae-979b-317b-0000f153541d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.35.84:54017/i","pattern":"[url:value = 'http://182.113.35.84:54017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--590591e9-0115-62dd-5bc0-00004a75e10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/i","pattern":"[url:value = 'http://42.228.221.46:33013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f382e49e-8638-40b7-dd1b-00003a5f0443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://181.79.85.69:11861/i","pattern":"[url:value = 'http://181.79.85.69:11861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80afcfc1-fd8c-9306-7ca2-00006e10cca1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.83.137:53442/i","pattern":"[url:value = 'http://175.151.83.137:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c54898-3e0e-367f-a131-0000d4d85f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/i","pattern":"[url:value = 'http://222.142.73.193:41053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856a874a-e880-f405-d755-000050decbf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.83.137:53442/bin.sh","pattern":"[url:value = 'http://175.151.83.137:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75dea581-c2c1-26a3-bca4-0000a69a8313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/bin.sh","pattern":"[url:value = 'http://222.142.73.193:41053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddeede8-752e-99bc-e99e-0000d93cb6f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.82.47:47055/i","pattern":"[url:value = 'http://123.14.82.47:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599c963b-25cc-4592-e2a0-000002eabd75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/i","pattern":"[url:value = 'http://163.142.92.235:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2cb1a0-ac0b-5e8b-58ba-0000e208eb78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.255.43.126:35671/i","pattern":"[url:value = 'http://58.255.43.126:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b7efd8-61e8-248a-c7a3-0000fb0fe8a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.34.181:57854/i","pattern":"[url:value = 'http://182.113.34.181:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee3f324-b8b3-193d-9275-0000cda0aa00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/i","pattern":"[url:value = 'http://125.44.39.164:59869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afa8c50-ffed-a13c-38c2-00005294a721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.201.118:34655/i","pattern":"[url:value = 'http://182.126.201.118:34655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37fddcf0-63ff-637a-e392-0000af3332fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.246.199:52106/i","pattern":"[url:value = 'http://125.47.246.199:52106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3450facd-1820-1482-60a1-0000e839184a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/i","pattern":"[url:value = 'http://87.68.238.27:33808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77160c23-6de7-84f5-049d-0000961c473d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/bin.sh","pattern":"[url:value = 'http://223.151.74.246:42753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64800c77-5544-638f-0f4b-0000e4c5f733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/i","pattern":"[url:value = 'http://223.151.74.246:42753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7abe36-fca6-1980-b9a1-00001e06c784","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.18.142:43500/i","pattern":"[url:value = 'http://42.54.18.142:43500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a71e8dd-d94f-28d4-1cd2-0000c082dbe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.115.33.201:51030/i","pattern":"[url:value = 'http://119.115.33.201:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe42a165-ae42-2174-7e57-000095a4e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/bin.sh","pattern":"[url:value = 'http://60.162.38.51:34372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7db132e-0a92-3f8f-abf6-0000b64b646d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.59.14.119:49412/i","pattern":"[url:value = 'http://125.59.14.119:49412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5726c75d-aec2-2f0a-7356-0000c6a43c6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.8.190:54830/i","pattern":"[url:value = 'http://42.5.8.190:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fd3a4b-3560-5504-40e2-00006e1c77c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/i","pattern":"[url:value = 'http://222.137.147.215:41949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692c3356-e4de-19cc-be18-00005af41e16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/i","pattern":"[url:value = 'http://125.43.20.178:46432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bf6185-4c1a-680c-c6a8-000034b06858","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/i","pattern":"[url:value = 'http://174.105.154.212:55690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743cfeda-f660-b062-12ce-0000d1384588","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.239.148.213:46343/i","pattern":"[url:value = 'http://121.239.148.213:46343/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46baa00-94b8-bdd7-8200-00007afea9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/i","pattern":"[url:value = 'http://115.49.24.80:42107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91e61a0-8582-c63e-598e-0000abe77fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.144.192:55986/i","pattern":"[url:value = 'http://124.94.144.192:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d806ea-09f4-ddca-0a51-00008e51edcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/bin.sh","pattern":"[url:value = 'http://223.105.50.190:35667/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab0b6c8-1d2c-372a-19d6-00001234386e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/i","pattern":"[url:value = 'http://223.105.50.190:35667/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95e3d89-4e6b-0eb7-33ee-0000fca95155","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/bin.sh","pattern":"[url:value = 'http://87.68.238.27:33808/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7900221-ec61-67f4-2ee1-00000fc09868","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://47.129.178.214:8092/app_JnCFbH.webp","pattern":"[url:value = 'http://47.129.178.214:8092/app_JnCFbH.webp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e23de4-81cc-c5b8-1e93-00007e71f6c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/15c864","pattern":"[url:value = 'http://5.182.210.174/15c864']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e5894a-625d-7190-f27f-0000b35a784e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/30494a","pattern":"[url:value = 'http://5.182.210.174/30494a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4fc726-35d5-a5db-dd2b-0000aa6e626a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14e7a4","pattern":"[url:value = 'http://5.182.210.174/14e7a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833965cd-c7f4-0da8-5ddc-00002a8e57d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e70ebc","pattern":"[url:value = 'http://5.182.210.174/e70ebc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4379ee0-c886-0bc1-1847-00000aeb9731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/751d98","pattern":"[url:value = 'http://5.182.210.174/751d98']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62e7201-0d51-cf9e-cc7e-0000346b39f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1cddd2","pattern":"[url:value = 'http://5.182.210.174/1cddd2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a17875d-7ec5-bbe1-c2c9-00006703735c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0d9f5f","pattern":"[url:value = 'http://5.182.210.174/0d9f5f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de197f39-d62d-bc6d-79c5-000013005696","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50b2c0","pattern":"[url:value = 'http://5.182.210.174/50b2c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f165faa-3ef7-1aa7-30f8-0000e96e699d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06f787","pattern":"[url:value = 'http://5.182.210.174/06f787']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e11659c-0b43-a857-853a-00007245bb14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e47e49","pattern":"[url:value = 'http://5.182.210.174/e47e49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4fce15-4628-2427-d663-00005d8182c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c08b5a","pattern":"[url:value = 'http://5.182.210.174/c08b5a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65e9bd-44b2-eb5f-07b6-00008b94f580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/889136","pattern":"[url:value = 'http://5.182.210.174/889136']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e63c573-7e3c-a914-dc69-0000c0f78000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/373541","pattern":"[url:value = 'http://5.182.210.174/373541']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91b300b-fd6a-cf4c-43de-0000ad0055f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/449188","pattern":"[url:value = 'http://5.182.210.174/449188']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a63e3-61ac-dae1-3d6e-0000870bbba2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/074635","pattern":"[url:value = 'http://5.182.210.174/074635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b091518-089f-3fcd-365b-0000a82ae98d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7fbafd","pattern":"[url:value = 'http://5.182.210.174/7fbafd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d043bb19-8e2d-91a9-18c5-00000f65bad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f46a9e","pattern":"[url:value = 'http://5.182.210.174/f46a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6270bf-c6a0-7c61-19ed-0000b6f7854d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/106fe5","pattern":"[url:value = 'http://5.182.210.174/106fe5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1deac-2f7e-f243-4142-0000eca2dbf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ccdef","pattern":"[url:value = 'http://5.182.210.174/6ccdef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57b2405-bc78-5238-f4c6-0000c482cee2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/119bdc","pattern":"[url:value = 'http://5.182.210.174/119bdc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b601561c-e6d4-8a1c-4dd1-00007aacd548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/455b2c","pattern":"[url:value = 'http://5.182.210.174/455b2c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66191923-ed2d-69c2-7498-00003116bca9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a923d","pattern":"[url:value = 'http://5.182.210.174/9a923d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e9e068-5d7d-6493-449e-0000351a7690","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e489b0","pattern":"[url:value = 'http://5.182.210.174/e489b0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a557d3-8c87-04fa-f152-000028ff5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae2072","pattern":"[url:value = 'http://5.182.210.174/ae2072']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf63734-64e3-f7be-f8dc-000013cdffc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/feb455","pattern":"[url:value = 'http://5.182.210.174/feb455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856b027a-d10d-1a1a-31a0-0000454672ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/452bff","pattern":"[url:value = 'http://5.182.210.174/452bff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca73590-d028-5bac-ceb6-0000e3e6094f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bea3b","pattern":"[url:value = 'http://5.182.210.174/8bea3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc4f70e-7815-83c0-a015-0000391c199c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8c04f2","pattern":"[url:value = 'http://5.182.210.174/8c04f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac3da84-9bf4-bc4e-d85b-00006bf04817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0dfd70","pattern":"[url:value = 'http://5.182.210.174/0dfd70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d529406b-fd85-2f5b-c475-0000023fb6d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c915c0","pattern":"[url:value = 'http://5.182.210.174/c915c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd3bd5e-54f6-79f9-9e29-0000dce51513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/330a6e","pattern":"[url:value = 'http://5.182.210.174/330a6e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b1e981-012c-3c50-9bc5-0000275bff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44973f","pattern":"[url:value = 'http://5.182.210.174/44973f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10b098f-fd8e-a42a-e88e-0000580f7b33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bb74f6","pattern":"[url:value = 'http://5.182.210.174/bb74f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17e831-879d-1995-5e36-0000c4ab36d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14515c","pattern":"[url:value = 'http://5.182.210.174/14515c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb2670a-0a70-07e5-c664-0000f632ef57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07c643","pattern":"[url:value = 'http://5.182.210.174/07c643']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90044347-2fd0-97ff-7ef4-00005d9a06a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8d34d4","pattern":"[url:value = 'http://5.182.210.174/8d34d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f820d6-b1c8-706b-319d-00005b905296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-03.cfd/dollar.exe","pattern":"[url:value = 'https://mon-blanc-03.cfd/dollar.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8f0e13-91c7-0cc2-1149-00000992eb05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/aa/Setup.rar","pattern":"[url:value = 'https://winds11.site/aa/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ab999a-f48b-69af-5622-0000e57533bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bulkdevices.com/blog/Chrome.exe","pattern":"[url:value = 'https://bulkdevices.com/blog/Chrome.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6f945d-f1a9-7429-b0d3-00005832cb90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/bin.sh","pattern":"[url:value = 'http://182.127.168.179:52810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64bff87-9456-32a9-a0be-000062262d67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/bin.sh","pattern":"[url:value = 'http://123.5.171.102:41517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c01e27-7a37-460e-1d56-00008651e8fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.251.27:57017/i","pattern":"[url:value = 'http://182.113.251.27:57017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b95483-3a39-9e31-bab8-00007b6f737f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.13.235.11:35751/i","pattern":"[url:value = 'http://221.13.235.11:35751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb1e674-a8a1-b425-5b0b-000013cc527c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/i","pattern":"[url:value = 'http://123.5.171.102:41517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44da670e-d957-4812-f394-0000b252ae4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1","pattern":"[url:value = 'http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a424ecd-f63e-78fb-03d6-00009b2902f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/bin.sh","pattern":"[url:value = 'http://61.53.123.190:47054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b47077-0359-aa95-705f-000046fb35ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043346.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043346.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8acb9b-44d2-fd12-a493-0000205376bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/MSI_PRO.png","pattern":"[url:value = 'https://deliverymailreport.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca5908a-d3ad-b824-9a86-0000cf290609","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043509.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043509.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80688b95-3a45-0475-56ba-000094b097df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003940.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003940.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b24f00-a6a8-6bb8-c280-0000a6f8c4c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003735.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003735.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be20655f-0257-ed6a-fba3-0000b07293b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043051.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043051.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0335ca-8fbf-fb93-5c77-00005376c53e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/i","pattern":"[url:value = 'http://182.127.168.179:52810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5783a4-b1d9-09ee-426c-0000cfa6bfd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/i","pattern":"[url:value = 'http://61.53.123.190:47054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad32b88-9909-cea6-9081-000072fa71eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/bin.sh","pattern":"[url:value = 'http://113.231.225.170:59950/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e7bc62-d4fb-9a74-920c-0000c93bcc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.42.30.58:48392/i","pattern":"[url:value = 'http://125.42.30.58:48392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb190eb7-c91f-8f8d-7d95-0000ce8f289e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/i","pattern":"[url:value = 'http://113.231.225.170:59950/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4efacf1-ce98-f57c-c98e-0000727750f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.102.201:45262/bin.sh","pattern":"[url:value = 'http://42.177.102.201:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feaca9e6-4c64-049c-3571-0000f9bc0121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/img/stego_anepqnd5rj.png","pattern":"[url:value = 'https://coconutoficial.com.br/img/stego_anepqnd5rj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b16fa1-7f49-b066-58f2-000072cf86aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/softbot.mips","pattern":"[url:value = 'http://91.92.47.97/softbot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8503f98-09ac-372b-c1b1-000034c3d796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cba6a7d-6b26-050e-5d7d-00001cf9674e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_shot.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_shot.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08a2be6-85f8-04cb-a5ce-000022047e2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_BB.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_BB.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c49b8-43cb-d966-fc02-0000e739c142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_rabit.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_rabit.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf5497a-78b2-0269-54ad-0000417c5acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/x1.png","pattern":"[url:value = 'https://eccmice.com/dot/x1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2c1a29-142f-43d8-d92d-0000411faee6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a1.png","pattern":"[url:value = 'https://eccmice.com/dot/a1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588c60f9-a48b-6393-05ff-0000cf90a905","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a2.png","pattern":"[url:value = 'https://eccmice.com/dot/a2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682afefc-2074-613a-ac5d-0000192cca97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/nd7.png","pattern":"[url:value = 'https://eccmice.com/dot/nd7.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175d6f49-dcf5-3277-7af9-00007c82a9d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mb.png","pattern":"[url:value = 'https://eccmice.com/dot/mb.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef342c64-7fff-aeee-ff3e-0000a32db9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mk4.png","pattern":"[url:value = 'https://eccmice.com/dot/mk4.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7aa8fc-afb2-c3fb-7662-00009ea66137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/n1.png","pattern":"[url:value = 'https://eccmice.com/dot/n1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8837563-8dca-b212-33ed-0000981e6f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://munihuacho.gob.pe/imagenes2/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/imagenes2/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2abf54-ad70-130b-96d0-00002725b8ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.252.216.68:38543/i","pattern":"[url:value = 'http://180.252.216.68:38543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e0b01e-36fe-4d54-5263-0000a60187c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/bin.sh","pattern":"[url:value = 'http://175.146.117.140:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3c1e3-b7b7-42f1-46bd-0000a9876e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/bin.sh","pattern":"[url:value = 'http://123.11.180.8:45505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbfcebfb-ef3b-5c15-47e2-000044664d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.85.188:32874/i","pattern":"[url:value = 'http://175.165.85.188:32874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7856fe70-1f5a-012a-3969-0000a8b01574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10819ff1-4e71-9cc6-7cd4-00002c16793a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.34/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ad4be4-134d-0bb5-3550-0000e1777468","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e29973-3fea-d697-d951-00004c4621c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f29821-6b94-42a4-b294-000027d2fa6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.41/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6fa811-b8ae-3729-224c-00005241c64b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.208:50797/i","pattern":"[url:value = 'http://222.140.183.208:50797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8a3d10-b1ed-0468-d26b-00008fd5c4f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.38/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a890cd7-b9e1-e7a8-8a59-0000446112a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a18ec4-1860-36ba-ab70-000066015d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.111/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6fae7b-0090-ff68-0771-0000415b2fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aec9e0b-2b9c-b6b1-b124-0000be5da3c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.24.21.177:55825/i","pattern":"[url:value = 'http://36.24.21.177:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b85e9e-75ef-eb5d-b9d1-0000e2799bf2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/i","pattern":"[url:value = 'http://123.11.180.8:45505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5dcee-a9a4-909c-883e-0000aae7246b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.240/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b00ad1-0183-9683-1bea-000049b341ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83464df-1387-db87-909f-000052866d4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106794d5-3a0e-268a-c653-0000b9cf0980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm6","pattern":"[url:value = 'http://176.65.139.139/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb118ff3-2417-a561-84ff-0000955f2caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.178.111:42241/i","pattern":"[url:value = 'http://182.127.178.111:42241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcc6ae8-4b66-a06e-fac0-00005e47c98f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86_64","pattern":"[url:value = 'http://176.65.139.139/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff348a29-e679-6466-7aaa-00002332bc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/m68k","pattern":"[url:value = 'http://176.65.139.139/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a8c711-24b8-e958-7e67-0000b524e6c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/spc","pattern":"[url:value = 'http://176.65.139.139/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575c4886-e3df-c8f8-8b9c-00004bb3fa19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86","pattern":"[url:value = 'http://176.65.139.139/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbc9b1f-c24f-33ca-e405-0000b36e0d9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/sh4","pattern":"[url:value = 'http://176.65.139.139/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6760a443-32b9-7c35-db88-000001736ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm7","pattern":"[url:value = 'http://176.65.139.139/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57fe8281-7f52-4b7c-9691-00004731119c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/persist.arm7","pattern":"[url:value = 'http://176.65.139.139/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b318beff-eab7-9acb-d5f9-000023c46a90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mips","pattern":"[url:value = 'http://176.65.139.139/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ca7836-0c8d-346f-2345-000048c704da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mpsl","pattern":"[url:value = 'http://176.65.139.139/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aee7948-b37f-eefd-59b2-000033b0946c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/ppc","pattern":"[url:value = 'http://176.65.139.139/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--658c3037-82ec-5e75-0b9c-0000ee1a4f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/i686","pattern":"[url:value = 'http://176.65.139.139/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20db185d-97f1-55d7-e755-000003086b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/i","pattern":"[url:value = 'http://175.146.117.140:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35026b4b-a334-4bde-43cb-0000e0bef4fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.77.45:59612/i","pattern":"[url:value = 'http://182.117.77.45:59612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef59a81b-ce7d-fa47-79db-0000906cd661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/i","pattern":"[url:value = 'http://219.155.81.115:40911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf79e53-0058-510b-9fee-000056971507","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/i","pattern":"[url:value = 'http://27.213.115.26:45049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b287f2d6-97b3-4acb-b423-000028249922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/i","pattern":"[url:value = 'http://61.52.62.249:60152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8066bec-87bb-c185-9cef-00003be47bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/i","pattern":"[url:value = 'http://182.113.40.115:55056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91afe0ef-ffda-bfc6-0843-00004edf9f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/bin.sh","pattern":"[url:value = 'http://174.105.154.212:55690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d92d717-264d-4628-fdf7-00003d6751e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/i","pattern":"[url:value = 'http://42.239.76.28:33921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19a555f-61cb-fac6-450a-00004480ff99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.68.198:56133/i","pattern":"[url:value = 'http://113.230.68.198:56133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cac18-0781-37ed-913e-00001d489b8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/bin.sh","pattern":"[url:value = 'http://42.231.184.120:39468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb4a835-bd9f-dfdb-7c80-00007c04234e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/bin.sh","pattern":"[url:value = 'http://36.70.235.87:40268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac4b680-5fa1-d3e0-563d-00003bd55143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/i","pattern":"[url:value = 'http://42.231.184.120:39468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30172bdf-c440-3413-08a5-000087004f3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/bin.sh","pattern":"[url:value = 'http://112.248.105.21:52064/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e139e2cf-b010-da5b-1bcd-00005dc88d54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/bin.sh","pattern":"[url:value = 'http://42.226.211.193:43686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b751c9-b0b0-39b9-5c21-00009cada25d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/bin.sh","pattern":"[url:value = 'http://42.59.235.202:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39db7bd-3044-d08b-6e4b-00001ccaffd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.234.164:44742/bin.sh","pattern":"[url:value = 'http://42.59.234.164:44742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78154df2-676a-13ce-e6fd-00006a3c37cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/i","pattern":"[url:value = 'http://112.248.105.21:52064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aec8be9-74e4-8d65-0ed7-0000238e4148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.135:58810/i","pattern":"[url:value = 'http://115.48.144.135:58810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d08983-9ad8-ff51-f9cf-00007b971103","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/i","pattern":"[url:value = 'http://42.226.211.193:43686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e257f1-3589-193e-94c5-0000fb8e14ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/bin.sh","pattern":"[url:value = 'http://61.137.206.166:45619/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80dceb15-07bd-c41d-5446-0000dc74906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.219.119.136:59026/i","pattern":"[url:value = 'http://27.219.119.136:59026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e180b2-ddd4-b065-dc41-0000de222510","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/bin.sh","pattern":"[url:value = 'http://115.50.82.162:60042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbceed64-f16e-35d2-4fbe-00002ca444bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/bin.sh","pattern":"[url:value = 'http://221.15.214.165:40665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f12a42f-fdf6-66a6-2131-0000feb54c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/bin.sh","pattern":"[url:value = 'http://182.116.21.39:52171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fde310-fb27-d0f8-d494-00005e0fc8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/i","pattern":"[url:value = 'http://115.50.82.162:60042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c9836b-78c3-b40b-42c1-000042e2d076","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/i","pattern":"[url:value = 'http://182.116.21.39:52171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e147108-e830-a544-145a-0000d69b8892","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.232.254.209:49853/i","pattern":"[url:value = 'http://113.232.254.209:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81411f01-5217-56a5-627f-000039355080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/bin.sh","pattern":"[url:value = 'http://123.11.14.253:33653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceac35c9-02e0-4e97-8be3-00001759c5da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.161.237:35487/i","pattern":"[url:value = 'http://115.55.161.237:35487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6e6cd8-ae1f-b330-8e4a-000014ae4969","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.235.135:48342/i","pattern":"[url:value = 'http://222.138.235.135:48342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8ae20b-a281-89ee-dcdd-000099065150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/bin.sh","pattern":"[url:value = 'http://115.52.242.168:48270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9ea6ce-0239-bc1e-ff5b-000080ad5b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/bin.sh","pattern":"[url:value = 'http://182.123.210.95:52102/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef675fb0-729c-3d5c-6c53-0000dfdd0e31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/i","pattern":"[url:value = 'http://123.11.14.253:33653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886f245e-d5fb-d004-6844-0000beb1dbf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.243.95.50:59704/i","pattern":"[url:value = 'http://222.243.95.50:59704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad95afd-c0d7-d86e-c2ad-0000f6317ad9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/i","pattern":"[url:value = 'http://222.140.183.70:34777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c92a64e-52a3-2fda-1642-0000682e0c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/bin.sh","pattern":"[url:value = 'http://66.212.173.225:52589/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2b54e0-0df8-d498-5fbd-00002ffff461","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/bin.sh","pattern":"[url:value = 'http://115.48.149.175:36753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558aada6-d6de-11a1-72c0-00003f47ccb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/i","pattern":"[url:value = 'http://182.123.210.95:52102/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f760093-bf35-1217-8ca5-0000b2459761","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.64.135.181:55489/i","pattern":"[url:value = 'http://217.64.135.181:55489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c15ce1d-53a5-392a-2af4-0000d82c6bfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.3.74:35880/i","pattern":"[url:value = 'http://182.113.3.74:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979aae84-d163-066f-418c-000032141d58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/bin.sh","pattern":"[url:value = 'http://182.117.86.246:45059/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4ab492-2ec3-11e3-bb9b-00001c41ea4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/i","pattern":"[url:value = 'http://182.117.86.246:45059/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9dcc82-b092-5e85-105c-0000ff36fd57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/bin.sh","pattern":"[url:value = 'http://42.235.82.252:57371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bddb2b11-d590-87c8-ca27-00008ee37a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/i","pattern":"[url:value = 'http://66.212.173.225:52589/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c849a545-52a5-d30c-a3b4-00005e57bbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/bin.sh","pattern":"[url:value = 'http://175.165.142.110:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0285a178-63fc-d561-8449-0000845a8643","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/i","pattern":"[url:value = 'http://115.48.149.175:36753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c0372f-db5a-fb8a-2c0d-0000cc04265f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/i","pattern":"[url:value = 'http://115.52.242.168:48270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b9cab4-daf1-b6bd-8ad6-0000b589274d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/i","pattern":"[url:value = 'http://61.53.75.99:58786/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c4f819-91fc-a6ab-ee22-0000a7edb075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.179.142:50106/i","pattern":"[url:value = 'http://42.232.179.142:50106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d31d7c-eb27-8f1b-b8f6-0000492b3bef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/i","pattern":"[url:value = 'http://175.165.142.110:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49e5a95-0bf4-0bb8-67c7-0000584d34dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/i","pattern":"[url:value = 'http://42.235.82.252:57371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec5af8d-9282-d0c3-9ef1-0000df0a5bea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/bin.sh","pattern":"[url:value = 'http://61.52.62.249:60152/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce23c9c-6c65-3f54-d804-00003d88fe8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.120.1.2:48934/i","pattern":"[url:value = 'http://182.120.1.2:48934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c26f40-5e7f-8115-74c2-000013e31ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/bin.sh","pattern":"[url:value = 'http://182.117.0.179:35408/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e950b7-4b31-7895-0f97-0000570aaa90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.182.112:48863/i","pattern":"[url:value = 'http://222.140.182.112:48863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd34384b-6a65-e592-d194-0000be926f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/bin.sh","pattern":"[url:value = 'http://61.137.198.130:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73b7abc-068b-b24a-de60-00005ce93a75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/bin.sh","pattern":"[url:value = 'http://119.189.172.160:60627/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323486f6-6e50-d759-c4d4-000009528186","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/i","pattern":"[url:value = 'http://182.117.0.179:35408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9158c8c9-c7fb-2366-e360-00000c9b6c70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/bin.sh","pattern":"[url:value = 'http://222.137.174.198:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea8e2a6-2fe7-571c-a4b3-00009dc6de06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/bin.sh","pattern":"[url:value = 'http://45.194.25.221:57073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06211192-88fe-6050-ef09-000015511a78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.67.25:54765/i","pattern":"[url:value = 'http://119.115.67.25:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fe272f-bba6-9cf1-b4dc-000047a72994","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/i","pattern":"[url:value = 'http://119.189.172.160:60627/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--708b76cc-fd30-884e-3e1b-00006fccae22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/bin.sh","pattern":"[url:value = 'http://42.85.209.65:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46333829-41d6-62a8-3fad-00006ba5e56a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/bin.sh","pattern":"[url:value = 'http://125.43.20.178:46432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005811fc-9d70-ea9e-9028-00007ec135cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/i","pattern":"[url:value = 'http://222.137.174.198:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a33ccb-fe07-8ccf-4f36-000055a0b7a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/i","pattern":"[url:value = 'http://42.85.209.65:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e330b79-ef92-9c62-94c5-0000f372aef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/bin.sh","pattern":"[url:value = 'http://61.53.205.255:56935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8238ced2-e71f-822a-e001-00000700e62c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/bin.sh","pattern":"[url:value = 'http://27.213.115.26:45049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07abee6-b75c-76df-74d2-0000938ff268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/i","pattern":"[url:value = 'http://61.53.205.255:56935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91a52a-33e8-9e50-6f22-000095d46d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/bin.sh","pattern":"[url:value = 'http://115.58.88.2:47310/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a4d2ad-dd1b-7b9b-3692-000047634b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/bin.sh","pattern":"[url:value = 'http://185.233.94.151:57893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3519fcf8-aac7-e7c2-05ed-000093c36182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/i","pattern":"[url:value = 'http://185.233.94.151:57893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c57f112-5c21-0ab4-eec3-0000137c2647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/i","pattern":"[url:value = 'http://115.58.88.2:47310/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaea3e-7ed6-6a94-bff6-0000237a8d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/bin.sh","pattern":"[url:value = 'http://116.138.47.10:38730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fe0ab1-ef44-bb61-1136-00009000e60c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.68.249.16:45432/bin.sh","pattern":"[url:value = 'http://83.68.249.16:45432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb2fc1a-f98d-4e96-8039-000078a11fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/bin.sh","pattern":"[url:value = 'http://125.43.246.89:58052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14666f7f-1c50-636c-76dd-0000ed6fd9d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/bin.sh","pattern":"[url:value = 'http://182.117.79.50:50740/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59056232-4b42-9ab0-a186-0000f43889a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/i","pattern":"[url:value = 'http://115.51.35.175:41863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e6e804-8824-860d-ecd2-00002cb1d308","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/i","pattern":"[url:value = 'http://61.243.238.134:46379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34692ed9-18d9-ef87-ddc2-000049479bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/i","pattern":"[url:value = 'http://125.43.246.89:58052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5753ca00-0a2c-aee6-25a8-000037017a73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/i","pattern":"[url:value = 'http://182.117.79.50:50740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92cf9b73-dd8f-c34f-d089-00003baf1fc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.121:52162/bin.sh","pattern":"[url:value = 'http://125.40.3.121:52162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b276c5da-cf89-116f-f784-00007b8302f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.3.121:52162/i","pattern":"[url:value = 'http://125.40.3.121:52162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1d0200-992c-3565-0014-0000a5464b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/bin.sh","pattern":"[url:value = 'http://182.116.23.190:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fcafb2-17ff-6809-d99d-0000af387147","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/i","pattern":"[url:value = 'http://175.175.210.205:34753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bde355-b95e-3956-c2da-00005e82c6af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/bin.sh","pattern":"[url:value = 'http://101.29.22.214:59328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fc6841-f305-771f-6af6-00009c01fd82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/i","pattern":"[url:value = 'http://182.116.23.190:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5889bc80-1f2b-2794-d439-0000c9578446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.247.47:34358/i","pattern":"[url:value = 'http://115.55.247.47:34358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76d5d74-3460-6c72-de69-00009b98bb19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/bin.sh","pattern":"[url:value = 'http://123.11.10.210:60891/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d762127-8464-f1a9-2799-0000fc8dd41c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/i","pattern":"[url:value = 'http://123.11.10.210:60891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb392c7-3043-30cd-4d59-00007189cf9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/i","pattern":"[url:value = 'http://101.29.22.214:59328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079dbc3-166c-8208-b201-00002c8ab8bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/bin.sh","pattern":"[url:value = 'http://61.53.75.99:58786/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec7e1ab-a402-be7e-59c8-0000633e625f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/bin.sh","pattern":"[url:value = 'http://113.239.223.142:55389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3794bfa-3af7-f376-e4e2-00007671ec3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/bin.sh","pattern":"[url:value = 'http://221.15.22.1:46570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daeb5cac-aa76-3d7c-88bc-000005c2c8d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/i","pattern":"[url:value = 'http://116.138.47.10:38730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71253e4b-b42b-1528-50c9-00008278e8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/i","pattern":"[url:value = 'http://175.150.176.248:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acc9a02-1217-2ca3-4ea6-0000ee8e7de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/bin.sh","pattern":"[url:value = 'http://123.12.234.38:40280/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e436f9-73ec-1267-032c-00006018ba4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/i","pattern":"[url:value = 'http://113.239.223.142:55389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd5d43a-49d9-e9fb-3818-0000ce670334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/bin.sh","pattern":"[url:value = 'http://27.215.124.221:49908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6b6dd7-be2a-d96c-c8de-00007683cb2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/i","pattern":"[url:value = 'http://221.15.22.1:46570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95df042a-96eb-aca7-a0d3-0000b3ac8c4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/bin.sh","pattern":"[url:value = 'http://125.41.228.121:39428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13ba32e-ffa5-dcd0-2fa5-0000f28428fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/i","pattern":"[url:value = 'http://123.4.233.107:35672/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c84565b-ea06-bca1-02e1-000092ab3968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/bin.sh","pattern":"[url:value = 'http://122.139.14.243:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010bd8d7-119a-9da6-431b-0000a283f085","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/bin.sh","pattern":"[url:value = 'http://42.224.49.156:55210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b5da19-f771-89de-1d10-0000275db777","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/i","pattern":"[url:value = 'http://125.41.228.121:39428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3212e7e-f01f-1097-6f92-0000ed771935","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/bin.sh","pattern":"[url:value = 'http://61.54.190.223:33351/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3908670-c7c6-c0da-89b4-00003d518184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/bin.sh","pattern":"[url:value = 'http://182.112.242.199:48848/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a89409-10db-ebc0-0642-000036871afd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.14.177.167:35854/bin.sh","pattern":"[url:value = 'http://123.14.177.167:35854/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9c7d74-4309-0ebd-ae55-0000c4a65d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.83.215:50416/i","pattern":"[url:value = 'http://61.53.83.215:50416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a76d3f-4d98-6f51-5659-000043a0c434","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/bin.sh","pattern":"[url:value = 'http://125.44.39.164:59869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8f753d-c7bb-c579-33a5-0000f78a2091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/i","pattern":"[url:value = 'http://182.112.242.199:48848/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145a2e49-71c3-8348-4aaf-00000b844233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/bin.sh","pattern":"[url:value = 'http://39.79.0.238:46471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70bed1d5-a77c-652e-86b4-0000cbced8d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.23.122:60626/i","pattern":"[url:value = 'http://123.189.23.122:60626/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f274cc-e646-001d-bc97-00007423053e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.106.88:54654/bin.sh","pattern":"[url:value = 'http://112.248.106.88:54654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28703a9c-b537-150b-c2ce-000075d3ab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/i","pattern":"[url:value = 'http://39.79.0.238:46471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6bfbd7-ed93-96cc-7d8b-00005198e6f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.121.137.156:38226/i","pattern":"[url:value = 'http://182.121.137.156:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa600c3-d152-940d-3db6-0000582a6b95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.106.88:54654/i","pattern":"[url:value = 'http://112.248.106.88:54654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2ea995-5051-5419-f617-0000acbd3506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/bin.sh","pattern":"[url:value = 'http://220.177.11.228:55723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389edd39-71d6-49f0-5ac2-0000fced9e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/bin.sh","pattern":"[url:value = 'http://175.175.210.205:34753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37382a53-aae7-f2f3-f0fe-0000dde5a1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/i","pattern":"[url:value = 'http://27.215.124.221:49908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd29d8d-1f9c-a4ef-b7b2-0000b1a98a2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.213.157:48371/i","pattern":"[url:value = 'http://120.84.213.157:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7602049a-2558-e745-8414-00008e90dcd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.20.151:35587/i","pattern":"[url:value = 'http://182.116.20.151:35587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8063a494-170e-40e8-a311-000010bc1c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/i","pattern":"[url:value = 'http://42.224.49.156:55210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311bc945-1c6e-fe65-6f1e-0000127aaf5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/bin.sh","pattern":"[url:value = 'http://218.13.149.41:47316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8753df-ffcd-2c29-c518-000090e92f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/bin.sh","pattern":"[url:value = 'http://219.156.34.146:35324/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8086b90f-147b-3693-d0dc-0000cef631f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/i","pattern":"[url:value = 'http://219.156.34.146:35324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6402797f-d298-409f-3aac-0000bb28c934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.219.1.198:34396/i","pattern":"[url:value = 'http://83.219.1.198:34396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64bccf0-bb96-42fc-e602-0000c7f336e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/bin.sh","pattern":"[url:value = 'http://112.237.148.180:50714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee47e48-a3d2-cb88-bb60-00009c24eb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/bin.sh","pattern":"[url:value = 'http://42.224.70.52:48398/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3bf03f-ec4b-5c7a-879b-00007ef6ef06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/i","pattern":"[url:value = 'http://112.237.148.180:50714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2f5ad5-3ff4-eccc-6a8b-000094b13ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://216.196.170.32:4154/i","pattern":"[url:value = 'http://216.196.170.32:4154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3b6aef-a119-5db3-241a-000078d1b8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/i","pattern":"[url:value = 'http://42.224.70.52:48398/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c864b8-eddf-9e27-fb28-0000ab150e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/bin.sh","pattern":"[url:value = 'http://103.160.130.109:34175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a09945-e274-5842-b334-0000f472982a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/i","pattern":"[url:value = 'http://218.13.149.41:47316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35da7771-0f52-ddff-e746-0000a73d9307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.151.43.183:45405/bin.sh","pattern":"[url:value = 'http://103.151.43.183:45405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776d8fc1-881c-dcdb-a153-0000eb0320cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.15.184.239:49837/i","pattern":"[url:value = 'http://221.15.184.239:49837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23402f3f-35ff-ecbd-896c-0000bf819edd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.139.42.27:42240/bin.sh","pattern":"[url:value = 'http://222.139.42.27:42240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449cf2d4-9dfe-cce7-6f74-0000a1c58456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/bin.sh","pattern":"[url:value = 'http://101.109.237.184:36403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1450a591-6916-2d14-eec7-0000b0bc8e25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.188.94.210:49613/i","pattern":"[url:value = 'http://123.188.94.210:49613/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfb615-e230-ca39-b829-00004a68e21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/bin.sh","pattern":"[url:value = 'http://112.198.130.112:60062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4352a78-d0d7-4032-3d9f-0000974c7499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/bin.sh","pattern":"[url:value = 'http://120.57.122.56:42186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b077e3e8-7aa5-1311-16c4-0000e8b580b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/bin.sh","pattern":"[url:value = 'http://27.215.86.140:41217/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b091fe3-c26c-9e63-146c-0000eb549d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/i","pattern":"[url:value = 'http://115.55.151.152:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03abce8-9eff-86c2-a059-0000ddfbfc40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/i","pattern":"[url:value = 'http://119.117.164.177:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7198a6a5-f27a-5396-4d1c-00002d4cda4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/i","pattern":"[url:value = 'http://115.55.55.56:36789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138e8b51-c863-ff8f-5293-00004b7fee9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.52.184.70:36515/i","pattern":"[url:value = 'http://61.52.184.70:36515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef92222-d564-023e-4e11-0000ac6cdb46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.9.18:35539/i","pattern":"[url:value = 'http://123.8.9.18:35539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aad9ba-7929-ae83-2c3b-00005a460aef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.140.187.100:34139/i","pattern":"[url:value = 'http://116.140.187.100:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6fc150-16a7-0f92-48f9-00009726f1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/i","pattern":"[url:value = 'http://125.40.24.46:51091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1ce441-3257-ebc5-24e9-0000ab3dc845","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/i","pattern":"[url:value = 'http://222.141.138.63:42485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b66af5-5ccf-d689-f3ec-0000fa696112","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/bin.sh","pattern":"[url:value = 'http://125.44.38.130:50257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d7ef28-95eb-de88-54a5-00000379faa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.13.74.177:44056/i","pattern":"[url:value = 'http://123.13.74.177:44056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf7e60-042f-768c-43c4-00001b71155e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.108.84.109:50272/i","pattern":"[url:value = 'http://85.108.84.109:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8823294-5cb0-67af-567b-0000e0aae307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/i","pattern":"[url:value = 'http://113.230.30.175:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ab8362-c474-a8e8-9111-0000ee8feb9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.77.48.16:34314/i","pattern":"[url:value = 'http://39.77.48.16:34314/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484ea9ea-c7ad-b310-24f3-0000bea27ba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/bin.sh","pattern":"[url:value = 'http://115.57.255.1:59779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505fbdd2-5d5e-9f10-c1c9-0000d0c43830","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/i","pattern":"[url:value = 'http://182.244.41.109:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e62fc6-c9bd-d83b-fd57-00003a21d0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/bin.sh","pattern":"[url:value = 'http://113.230.30.175:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc1591e-6a32-812c-2918-000065d4df64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/bin.sh","pattern":"[url:value = 'http://118.34.109.121:32776/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d84242e-194e-bb9e-9cfa-0000dd9888b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/bin.sh","pattern":"[url:value = 'http://66.8.135.142:58566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d898c5-5b49-702f-752b-000052824ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/i","pattern":"[url:value = 'http://118.34.109.121:32776/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e31011-6a85-4952-f7d7-00009a532ddb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/bin.sh","pattern":"[url:value = 'http://175.150.176.248:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408efa2c-2b99-e25a-0c7d-000021725d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/bin.sh","pattern":"[url:value = 'http://222.140.183.70:34777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eacaff-4102-2e59-a50e-00003b244550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/bin.sh","pattern":"[url:value = 'http://115.51.35.175:41863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473caa01-1771-1d36-be49-00008e33073a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/bin.sh","pattern":"[url:value = 'http://163.142.92.235:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7d77bc-9669-3eca-e920-000076f8a025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/bin.sh","pattern":"[url:value = 'http://182.113.40.115:55056/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d2b2d3-f986-f126-b419-0000c597b10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/i","pattern":"[url:value = 'http://27.215.86.140:41217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3588532f-1090-76d0-d4f7-0000b59241c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.56.113.61:36360/i","pattern":"[url:value = 'http://115.56.113.61:36360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62598861-2f3c-f11c-cfb5-00005c8e1fc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/bin.sh","pattern":"[url:value = 'http://123.4.233.107:35672/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d02579a-64ab-50af-31f4-00001f06d20a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/bin.sh","pattern":"[url:value = 'http://183.188.77.45:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad0d12f-6f34-3d03-1b50-0000d9976233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/bin.sh","pattern":"[url:value = 'http://115.49.24.80:42107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4391be-b0a3-2810-4ddb-0000bc393d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.204.195.233:38896/bin.sh","pattern":"[url:value = 'http://27.204.195.233:38896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d6c6a0-051a-3280-9eeb-0000df1e1f03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/bin.sh","pattern":"[url:value = 'http://119.117.164.177:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab02cb7-e3c1-dd9a-fcd9-0000c6377583","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/i","pattern":"[url:value = 'http://182.112.6.161:53066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccbab57-e0f9-8f59-b36a-0000dcc003fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/i","pattern":"[url:value = 'http://123.97.30.141:52890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7ee97-01fe-3e95-5729-000099d213e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.226.31.25:56290/i","pattern":"[url:value = 'http://114.226.31.25:56290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500c892d-02e3-0ee8-cba2-00002714ff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/bin.sh","pattern":"[url:value = 'http://125.40.24.46:51091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0116e044-c09d-21ee-123e-0000294f260e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/i","pattern":"[url:value = 'http://114.227.224.253:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c91-b9ca-4ea0-5c0a-0000008eae78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://93.88.96.103:33908/i","pattern":"[url:value = 'http://93.88.96.103:33908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcfbdd5-4381-f12f-82e8-00002584bdda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/bin.sh","pattern":"[url:value = 'http://115.98.147.69:48442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495d110-6350-39ae-178c-0000f01675ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.52.190.88:42242/i","pattern":"[url:value = 'http://115.52.190.88:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd72b6b-a059-9d64-50c9-0000de33db5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.55.170:47643/i","pattern":"[url:value = 'http://42.53.55.170:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f25702-5a51-1ebe-4dd7-000051bbc9d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/bin.sh","pattern":"[url:value = 'http://219.155.81.115:40911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8375cda7-e7b0-91ed-24a9-0000767a2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/bin.sh","pattern":"[url:value = 'http://115.55.55.56:36789/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bff8e3-8afc-5d2e-c2a4-0000d869ee67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/bin.sh","pattern":"[url:value = 'http://123.97.30.141:52890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff0ab2b-8d65-f331-3fa4-000030207b1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.49.244:41600/i","pattern":"[url:value = 'http://115.55.49.244:41600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a7cfbe-e6f8-69e0-503d-00003f666b09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/bin.sh","pattern":"[url:value = 'http://61.243.238.134:46379/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e5b401-cc1c-dfac-1c93-0000a57d5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/i","pattern":"[url:value = 'http://103.160.130.109:34175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b815b096-04ec-f36c-d8aa-000084f0cb07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/bin.sh","pattern":"[url:value = 'http://222.141.138.63:42485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd11b8-feec-1d1a-d2ec-0000d93206bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.57.66.51:42056/i","pattern":"[url:value = 'http://42.57.66.51:42056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92796a4d-c410-5387-6c71-00003aff111a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.68.95.197:48234/i","pattern":"[url:value = 'http://103.68.95.197:48234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3173985-c94f-8238-ac6b-00009edf945b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.100.62:51333/i","pattern":"[url:value = 'http://42.224.100.62:51333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f35d82b-4bf6-aa49-5350-0000df3c6704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/bin.sh","pattern":"[url:value = 'http://115.42.71.239:50213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5870d28c-26e6-b847-4a6c-0000ff5271b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/i","pattern":"[url:value = 'http://115.57.255.1:59779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2507de9-0833-9226-7eb3-0000a3bff83c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/i","pattern":"[url:value = 'http://182.113.205.36:51969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90656265-6dfa-58a7-3bb6-0000d079d007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/bin.sh","pattern":"[url:value = 'http://182.112.6.161:53066/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2a6b55-1678-2eca-c97f-0000c3b3d2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/bin.sh","pattern":"[url:value = 'http://114.227.224.253:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6408c2e0-318c-5c0e-9766-0000aa83a894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/i","pattern":"[url:value = 'http://66.8.135.142:58566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ece206-d400-d8b2-491d-0000350f0695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/bin.sh","pattern":"[url:value = 'http://42.239.76.28:33921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504243ad-01c0-d5c5-a970-00006650b7b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/bin.sh","pattern":"[url:value = 'http://222.136.52.188:32973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58ea61-1962-30d4-129e-00007c4226e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/bin.sh","pattern":"[url:value = 'http://113.229.190.135:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d247b64-f086-4730-8a3a-00004b606283","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/i","pattern":"[url:value = 'http://125.44.38.130:50257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2861a-81c2-8d12-5370-0000b0c69eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/bin.sh","pattern":"[url:value = 'http://42.225.15.213:35530/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60314a07-d299-f3d9-ed05-0000aa71f4fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/bin.sh","pattern":"[url:value = 'http://182.113.205.36:51969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20f3568-c1bf-9e68-9426-0000803c00f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/i","pattern":"[url:value = 'http://115.42.71.239:50213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8eb155-c2a7-f161-ba61-000069df98c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.182:40164/i","pattern":"[url:value = 'http://27.44.145.182:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b594c8f4-7ec3-7564-0250-0000b2fa940c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.223.148:58418/i","pattern":"[url:value = 'http://115.60.223.148:58418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5a5f88-af4d-ec0d-5003-0000adcdf61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/i","pattern":"[url:value = 'http://42.230.42.7:45769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd74290-77f6-cee4-1032-0000d39d9773","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.6.248:33966/i","pattern":"[url:value = 'http://115.49.6.248:33966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4457ea56-28e8-09e7-e332-0000cdd9c8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/bin.sh","pattern":"[url:value = 'http://42.230.42.7:45769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a353941-15fa-cadf-8b73-0000dd19ebda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.47.32.24:44968/i","pattern":"[url:value = 'http://125.47.32.24:44968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78404942-09cf-0c28-0c5c-0000d00fa9a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/bin.sh","pattern":"[url:value = 'http://115.55.151.152:49757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f787757-fc21-fdd9-8758-0000a3256bdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.165:53887/i","pattern":"[url:value = 'http://120.84.215.165:53887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e900c-46c4-ee64-faed-00006b951bd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.234.246.166:55376/i","pattern":"[url:value = 'http://124.234.246.166:55376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd505ab-15e7-edcc-c850-0000aa9525ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.1.142:60668/i","pattern":"[url:value = 'http://125.41.1.142:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e378aa-d31f-4754-9812-0000fe7cdde5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/i","pattern":"[url:value = 'http://115.98.147.69:48442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0473867-9a07-96c7-8e77-000046c9f013","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/i","pattern":"[url:value = 'http://182.241.136.218:42856/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d26638-a75e-8173-44c8-000085748e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/bin.sh","pattern":"[url:value = 'http://196.189.3.1:47844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf61f2e-350f-63cc-3270-00005f21778f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/bin.sh","pattern":"[url:value = 'http://182.241.136.218:42856/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edeec56c-dbba-4ae8-d2b2-000044849b73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.224.238:59568/i","pattern":"[url:value = 'http://175.151.224.238:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51a5b19-b440-0262-bcbb-000043aca051","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/i","pattern":"[url:value = 'http://196.189.3.1:47844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635ed0dc-e4f9-6e9b-f9ec-00007d0e3075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/i","pattern":"[url:value = 'http://120.57.122.56:42186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd578ab-7c90-c1a7-2908-000030042296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/i","pattern":"[url:value = 'http://112.198.130.112:60062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fab88c1-3bb0-5c59-179b-0000d645d175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.118.161:54312/bin.sh","pattern":"[url:value = 'http://182.126.118.161:54312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91c3657-a3b5-b9d2-e3dc-00000098b008","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.0.60.188:40182/i","pattern":"[url:value = 'http://175.0.60.188:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90f2cd6-a168-28d2-46c3-0000d4fc7aaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/i","pattern":"[url:value = 'http://101.109.237.184:36403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a61f6e-24d4-873c-4545-000044d0abe0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/bin.sh","pattern":"[url:value = 'http://125.45.57.136:34620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caaf9ae-4b5f-e85c-1a3f-0000d4ed258a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/i","pattern":"[url:value = 'http://123.12.234.38:40280/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e17734c-eb9d-2eb0-1109-00000a379ea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.230.168.62:51199/i","pattern":"[url:value = 'http://77.230.168.62:51199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f647439-16af-5b24-eeb4-0000de40823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.54.95.49:35344/bin.sh","pattern":"[url:value = 'http://24.54.95.49:35344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabdf22c-eaed-42f9-210d-0000567bb68e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/i","pattern":"[url:value = 'http://125.45.57.136:34620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171b06a0-f5bc-7cdb-b3a0-0000f13176b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.83.154:45105/i","pattern":"[url:value = 'http://113.230.83.154:45105/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbe74d0-7aab-7042-9f5f-00001e7552f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://59.96.139.68:54390/bin.sh","pattern":"[url:value = 'http://59.96.139.68:54390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d387ac08-45ef-f2b6-69c4-00008b0bf1a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/bin.sh","pattern":"[url:value = 'http://162.255.251.91:33299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8741220a-ccae-ffe0-f03f-00005f88f7d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/i","pattern":"[url:value = 'http://162.255.251.91:33299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46af6127-f385-e9c9-6677-000045931629","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 8.130.121.151","pattern":"[ipv4-addr:value = '8.130.121.151']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00b9a29-053b-931c-bc0e-0000f17f8697","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 138.68.108.72","pattern":"[ipv4-addr:value = '138.68.108.72']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf95b1f-60f0-cf9e-ec1d-00009400f936","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.45.236.27","pattern":"[ipv4-addr:value = '99.45.236.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc15af0-b93b-5649-96ce-00003ae1f5bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.183.235","pattern":"[ipv4-addr:value = '99.249.183.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8d9c08-a376-1282-2900-000094832ac7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.135.86","pattern":"[ipv4-addr:value = '99.249.135.86']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca77332-4fa3-ed68-b5af-0000819f5b7d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.112.236","pattern":"[ipv4-addr:value = '99.249.112.236']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5218c8-9034-7c6a-766a-0000b5ac8a6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.237.52.2","pattern":"[ipv4-addr:value = '99.237.52.2']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f5aa3f-2dcb-cece-4a7e-0000cb3ed612","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.227.229.131","pattern":"[ipv4-addr:value = '99.227.229.131']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2b68fd-dbf8-6db8-912e-00004798399c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.224.131.187","pattern":"[ipv4-addr:value = '99.224.131.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254e6828-d51e-1eb4-69e5-0000bbd7d1a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.61","pattern":"[ipv4-addr:value = '99.114.206.61']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7009ede-78ff-87ac-0071-0000adef02ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.57","pattern":"[ipv4-addr:value = '99.114.206.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd1282-a1cd-0adc-c823-00005fef9c61","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.83.98","pattern":"[ipv4-addr:value = '98.97.83.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0a8a32-65a9-cd74-8f4e-000045fe3368","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.97.151.71","pattern":"[ipv4-addr:value = '98.97.151.71']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26490dc1-8797-b83d-1dd8-000009b30fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.151.104","pattern":"[ipv4-addr:value = '98.97.151.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6677ea48-6459-f275-cd4b-0000dd9c1b31","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.93.167.141","pattern":"[ipv4-addr:value = '98.93.167.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ebe5aa-f0ca-6273-0eb9-0000216b7252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.92.183.234","pattern":"[ipv4-addr:value = '98.92.183.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facedf15-beda-5fa6-5551-0000843a60b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.231.170","pattern":"[ipv4-addr:value = '98.91.231.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a8c93-0895-1497-b619-00001b81c1b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.209.6","pattern":"[ipv4-addr:value = '98.91.209.6']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e7ddd2-94e8-7c01-45b4-0000ee8f8f3e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.86.173.85","pattern":"[ipv4-addr:value = '98.86.173.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46cbd134-3b4a-9c06-6460-0000ef1de453","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.4.49","pattern":"[ipv4-addr:value = '98.80.4.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803fbfab-a7a7-3792-af54-0000b3cef82d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.215.201","pattern":"[ipv4-addr:value = '98.80.215.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850b512e-090a-2235-f7c6-0000b2885e68","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.43.29.1","pattern":"[ipv4-addr:value = '98.43.29.1']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67a2d89-6ae1-8c21-9291-00000a7d6a20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.22.145.68","pattern":"[ipv4-addr:value = '98.22.145.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9c6b7a-9cf6-3d9f-2548-0000aa53771d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.202.140.14","pattern":"[ipv4-addr:value = '98.202.140.14']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f00a044-cf4b-4cf9-4900-0000e720d5c4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.199.111.73","pattern":"[ipv4-addr:value = '98.199.111.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5e612b-73f1-3718-2921-0000e926e3d4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.254","pattern":"[ipv4-addr:value = '98.190.61.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4c01d0-8dab-71d4-009e-000053dc3ae8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.247","pattern":"[ipv4-addr:value = '98.190.61.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30427305-2844-d3d6-c6c1-0000119857ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.180.242.243","pattern":"[ipv4-addr:value = '98.180.242.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a442a982-b523-a101-9624-0000035cf6ea","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.32.237","pattern":"[ipv4-addr:value = '98.175.32.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cafd304-7ca6-b5a8-248e-0000de5599e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.158.5","pattern":"[ipv4-addr:value = '98.175.158.5']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a809990-a741-228b-5e81-00005d711857","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.61.78","pattern":"[ipv4-addr:value = '98.174.61.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277e3e5c-609b-4c94-04cd-0000728c9ba0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.246","pattern":"[ipv4-addr:value = '98.174.39.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7113c2-eb05-64a3-9622-0000d891aa4e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.23","pattern":"[ipv4-addr:value = '98.174.39.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a8e80f-2e97-1dfc-895c-00008caa2100","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.168.101.144","pattern":"[ipv4-addr:value = '98.168.101.144']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f603f10-04a7-7501-719f-00005947c321","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.118.135.235","pattern":"[ipv4-addr:value = '98.118.135.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41a7ef-18c1-92f7-40d9-000034b7a604","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.111.211.243","pattern":"[ipv4-addr:value = '98.111.211.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe2fc09-656a-c150-b585-0000c02a39b1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.100.78.54","pattern":"[ipv4-addr:value = '98.100.78.54']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef97038-0f3b-2bde-9d10-0000e2795013","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.75.176.87","pattern":"[ipv4-addr:value = '97.75.176.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eea7b1e-8eea-f626-b9b0-0000b6755aac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.176.59","pattern":"[ipv4-addr:value = '97.211.176.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90226756-e797-9f11-5086-00009ad42d26","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.104.169","pattern":"[ipv4-addr:value = '97.211.104.169']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3c2bbd-9f19-a209-c000-0000583450a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.137.143.133","pattern":"[ipv4-addr:value = '97.137.143.133']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c58b29-ac87-963d-140a-00009bcf81ab","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.125.240.75","pattern":"[ipv4-addr:value = '97.125.240.75']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c98896-c233-cce5-e361-0000619b536a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.62.71.3","pattern":"[ipv4-addr:value = '96.62.71.3']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d0e72d-1da8-5571-8f86-0000bba7b8c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.52.164.34","pattern":"[ipv4-addr:value = '96.52.164.34']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130c4513-e99b-643e-429a-0000c2ba54ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.27.48.216","pattern":"[ipv4-addr:value = '96.27.48.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a913c4-a89d-da07-3b06-00008ecbf310","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 96.234.71.42","pattern":"[ipv4-addr:value = '96.234.71.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc4eb0-6012-6fbe-b1be-0000d04271de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.22.217.74","pattern":"[ipv4-addr:value = '96.22.217.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b0b14-4b4d-7f68-c677-00001c9ff2bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.97.203.206","pattern":"[ipv4-addr:value = '95.97.203.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1ab0b1-1221-ab6c-ee97-0000935c4542","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.252.87","pattern":"[ipv4-addr:value = '95.85.252.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68a750a-7699-c36a-0940-00007f63389e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.241.219","pattern":"[ipv4-addr:value = '95.85.241.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9495d4e-cfa7-f630-3b13-0000dec305a6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.81.217.243","pattern":"[ipv4-addr:value = '95.81.217.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc55a55-ec17-ec44-42fa-0000e991bf13","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.65.66.242","pattern":"[ipv4-addr:value = '95.65.66.242']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af67332f-9e31-e8f5-796d-0000082f4531","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.57.228.130","pattern":"[ipv4-addr:value = '95.57.228.130']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0d27-0466-d8f8-0990-00000197dc99","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.49.27.206","pattern":"[ipv4-addr:value = '95.49.27.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b625f1ed-203f-618e-aa22-000084894a23","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.40.120.162","pattern":"[ipv4-addr:value = '95.40.120.162']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b8ff3a-8c11-550b-323c-0000ad480761","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.41.116","pattern":"[ipv4-addr:value = '95.27.41.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca38b431-29f8-7983-9a55-0000afb20932","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.139.70","pattern":"[ipv4-addr:value = '95.27.139.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b38fece-7170-cc23-49bd-0000aa9fedce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.216.4.60","pattern":"[ipv4-addr:value = '95.216.4.60']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66323b41-6110-8353-b806-0000fd8a427f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.178.113.84","pattern":"[ipv4-addr:value = '95.178.113.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c7a022-bf90-950e-e618-0000d4872322","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.177.109.137","pattern":"[ipv4-addr:value = '95.177.109.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f852f326-dde0-485d-ae6d-000042896bfd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.173.188.94","pattern":"[ipv4-addr:value = '95.173.188.94']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3672dd89-1f44-909f-ffa9-0000b7c00834","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.158.43.234","pattern":"[ipv4-addr:value = '95.158.43.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09b0bc7-8499-d73e-0dd4-0000b68aebb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.153.108.140","pattern":"[ipv4-addr:value = '95.153.108.140']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91235b7-76c4-80d6-6f23-000058d4b663","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.253","pattern":"[ipv4-addr:value = '95.142.134.253']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20014c59-a791-5a09-0237-0000b1f0788a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.175","pattern":"[ipv4-addr:value = '95.142.134.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e079fe1e-e597-23d3-4382-00002ba7b390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.43","pattern":"[ipv4-addr:value = '95.0.32.43']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3aa9ee0-9254-57bb-dddc-0000ec2a2d28","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.116","pattern":"[ipv4-addr:value = '95.0.32.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa3cf5a-bc88-2b65-bbcc-0000ee6c9371","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.115","pattern":"[ipv4-addr:value = '95.0.32.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca121f0-464f-a3de-7628-0000fd36ce6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.171.24","pattern":"[ipv4-addr:value = '95.0.171.24']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e794f7b1-2ed7-462d-3d42-00007be4acff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.96.179.223","pattern":"[ipv4-addr:value = '94.96.179.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a57e56-a54d-7248-2b0b-0000febfd561","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.9.233.139","pattern":"[ipv4-addr:value = '94.9.233.139']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9917243-3418-edf0-b1a5-0000c0bc466a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.45","pattern":"[ipv4-addr:value = '94.78.89.45']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c2847f-840e-d170-5376-0000e791a7ef","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.26","pattern":"[ipv4-addr:value = '94.78.89.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa1214a-4a28-4d30-e4eb-0000e31cdb5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.20","pattern":"[ipv4-addr:value = '94.78.89.20']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3c53bc-9171-f131-a933-00001ff148eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.76.14.233","pattern":"[ipv4-addr:value = '94.76.14.233']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f436ec-dc0b-af35-11b0-00009892f9a0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.62.83.184","pattern":"[ipv4-addr:value = '94.62.83.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c838ea25-8370-67d8-359c-00000dcfa094","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.50.241.41","pattern":"[ipv4-addr:value = '94.50.241.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c4663d-b7c2-6206-9133-00006bdac93a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.26.130.173","pattern":"[ipv4-addr:value = '94.26.130.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697fefd0-01a0-83b1-949f-0000146ee0a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.81.78","pattern":"[ipv4-addr:value = '94.249.81.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c2b60-0839-8afe-e5c8-00006ca25fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.87","pattern":"[ipv4-addr:value = '94.249.49.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e0a20c-c664-4664-929c-0000318e5905","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.70","pattern":"[ipv4-addr:value = '94.249.49.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0b8edf-fe94-c948-2a3c-0000a943bad1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.247.62.199","pattern":"[ipv4-addr:value = '94.247.62.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--789f2ff4-5085-108a-d2e7-00007ee2d252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.236.138.235","pattern":"[ipv4-addr:value = '94.236.138.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d3f5e-6c60-40e0-108a-000037bd9287","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.187.177","pattern":"[ipv4-addr:value = '94.231.187.177']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fcae3b-1d3b-3bd1-b828-0000a83f0206","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.180.184","pattern":"[ipv4-addr:value = '94.231.180.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed2e2fa-7ca0-aedb-3bc6-000005b4d79c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.222","pattern":"[ipv4-addr:value = '94.23.188.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77dbb340-900c-6797-b705-000007f269c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.221","pattern":"[ipv4-addr:value = '94.23.188.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc83d6-dbb2-c458-a12e-0000063003f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.220","pattern":"[ipv4-addr:value = '94.23.188.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2927520-bcb0-6ee0-de44-00001008d0ae","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.216","pattern":"[ipv4-addr:value = '94.23.188.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9c140c-fd60-d543-55d7-0000138c04c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.214","pattern":"[ipv4-addr:value = '94.23.188.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f881af-3b84-c626-6a9d-000016c31245","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.213","pattern":"[ipv4-addr:value = '94.23.188.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ffb139-f2fd-be84-1476-000017017872","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.212","pattern":"[ipv4-addr:value = '94.23.188.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6e083-b2c9-96cd-b240-00001547c62b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.211","pattern":"[ipv4-addr:value = '94.23.188.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3659f0-4ece-51ae-203a-0000a3e8f0f6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.209","pattern":"[ipv4-addr:value = '94.23.188.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c316966-066a-d6a9-a9e6-0000a22a9ac1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.208","pattern":"[ipv4-addr:value = '94.23.188.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db894461-3070-55e3-2cd4-0000a8b4b7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.206","pattern":"[ipv4-addr:value = '94.23.188.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3587254d-8b8a-679a-eac6-0000ab3063a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.204","pattern":"[ipv4-addr:value = '94.23.188.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce48078-48ec-111c-927f-0000afbd1f17","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.202","pattern":"[ipv4-addr:value = '94.23.188.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45edd1c2-afef-e6b6-df44-0000adfba14e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.201","pattern":"[ipv4-addr:value = '94.23.188.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32eae154-cb0b-58cb-4ab1-0000ac39cb79","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.200","pattern":"[ipv4-addr:value = '94.23.188.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b25ce0-1c71-9438-3df6-00009940c5ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.199","pattern":"[ipv4-addr:value = '94.23.188.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb56c76-1c2c-097f-72e7-00009882af9b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.198","pattern":"[ipv4-addr:value = '94.23.188.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080d4171-51e2-b805-ba5a-0000921c8291","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.196","pattern":"[ipv4-addr:value = '94.23.188.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e603205d-e38e-0a7c-2fa7-0000919856ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.194","pattern":"[ipv4-addr:value = '94.23.188.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7867b5fe-ff64-ce94-3f62-000094d7407a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.193","pattern":"[ipv4-addr:value = '94.23.188.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377a66d-d2ca-1596-431a-00004a05336d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.48.249","pattern":"[ipv4-addr:value = '94.207.48.249']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cf4374-805b-063f-562b-000001653f3a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.29.221","pattern":"[ipv4-addr:value = '94.207.29.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c21c68e-f95d-a965-ada9-000072e47d4c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.206.148.23","pattern":"[ipv4-addr:value = '94.206.148.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8988a11f-0303-e353-ec16-0000c968a745","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.204.212.135","pattern":"[ipv4-addr:value = '94.204.212.135']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b84c58-31c9-823e-530f-0000a8eb8a72","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.191.86.165","pattern":"[ipv4-addr:value = '94.191.86.165']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8566c1d8-ed8c-30d5-e20d-000000618b7a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.254.26","pattern":"[ipv4-addr:value = '94.183.254.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baa5595-02e9-a351-c8ad-0000b2d4f3a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.239.85","pattern":"[ipv4-addr:value = '94.183.239.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b44fc-1986-9ca4-770a-00006c5b495e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.183.157.246","pattern":"[ipv4-addr:value = '94.183.157.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500192de-9e10-f407-ab3e-0000a459f9d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.123.154","pattern":"[ipv4-addr:value = '94.168.123.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d61bb6e-c4aa-15a1-c815-0000022ef261","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.122.154","pattern":"[ipv4-addr:value = '94.168.122.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619e4620-d44c-4244-ffd3-0000afd812b4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.114.250","pattern":"[ipv4-addr:value = '94.168.114.250']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777f20ae-2c28-775e-d8af-0000ae0975fd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.62.72","pattern":"[ipv4-addr:value = '94.158.62.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd752e71-99eb-3523-df28-00004f110b20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.61.229","pattern":"[ipv4-addr:value = '94.158.61.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bffdde7-83c7-6c7c-e104-00004cbef390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.60.200","pattern":"[ipv4-addr:value = '94.158.60.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930fadf0-3172-d568-31f7-000019381eca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.158.58.127","pattern":"[ipv4-addr:value = '94.158.58.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6b3853-bda0-6c41-6c50-00001c77084f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.58.120","pattern":"[ipv4-addr:value = '94.158.58.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a7b14e-2399-b324-c2f3-0000777f851b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.156.37.223","pattern":"[ipv4-addr:value = '94.156.37.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d58da8-5e01-bf33-70b3-000050343c84","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.137.229.234","pattern":"[ipv4-addr:value = '94.137.229.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a93d5d-3e13-84aa-f59b-0000f29e248c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.124.166.111","pattern":"[ipv4-addr:value = '94.124.166.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8910434-e316-d0e8-a8dc-000019a46c52","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.122.35.32","pattern":"[ipv4-addr:value = '94.122.35.32']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575986f3-7640-8a61-a398-00009ea9701f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.103.3.108","pattern":"[ipv4-addr:value = '94.103.3.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cb7e0d-cbca-ad02-9b52-0000a7f02690","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.102.4.88","pattern":"[ipv4-addr:value = '94.102.4.88']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f3f58a-d40c-9156-2a19-0000a958b38c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.88.156.13","pattern":"[ipv4-addr:value = '93.88.156.13']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cc2124-db3d-708e-3340-00001862c619","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.67.3.46","pattern":"[ipv4-addr:value = '93.67.3.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e1b2a2-f178-9ed4-3aba-00001cbdba07","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.184.149.179","pattern":"[ipv4-addr:value = '93.184.149.179']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b9a3c0-8e5d-457a-290b-000021c6f288","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.176.165.100","pattern":"[ipv4-addr:value = '93.176.165.100']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a20f0b5-ca25-41f3-1258-000081ec31ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.171.184.57","pattern":"[ipv4-addr:value = '93.171.184.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d34f2fb-1afc-b669-4046-00000118955f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.66.200","pattern":"[ipv4-addr:value = '93.170.66.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e739d730-1bf2-3cdd-30a1-000062122590","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.117.8","pattern":"[ipv4-addr:value = '93.170.117.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca310bbf-bc86-9c72-e801-0000516c12e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.152.221.68","pattern":"[ipv4-addr:value = '93.152.221.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09b072d-6ff2-3306-c258-00001bad8cfa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.127.121.67","pattern":"[ipv4-addr:value = '93.127.121.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba57258-c0eb-c37b-4380-0000698abfc4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.123.109.67","pattern":"[ipv4-addr:value = '93.123.109.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7f7a2a-41a2-292e-a156-00007a580a58","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.170.197","pattern":"[ipv4-addr:value = '93.118.170.197']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446e626f-a8a9-df9e-b0c6-0000e43a805f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.169.27","pattern":"[ipv4-addr:value = '93.118.169.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cecb56-372d-46c0-3f63-000045b48609","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.164.193","pattern":"[ipv4-addr:value = '93.118.164.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11deb64-6396-b515-2551-000093aac763","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.153.229","pattern":"[ipv4-addr:value = '93.118.153.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8d936f-b58a-10b9-b4aa-00002e800b36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.150.98","pattern":"[ipv4-addr:value = '93.118.150.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9579a3f8-51c3-3065-bfcf-00003659bfb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.148.66","pattern":"[ipv4-addr:value = '93.118.148.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--572f46f1-6292-3bd7-8293-000037fbd05b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.140.9","pattern":"[ipv4-addr:value = '93.118.140.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f10c05b-269a-48bf-f896-000067c8ea12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.92","pattern":"[ipv4-addr:value = '93.118.139.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b19e260-5d6d-1283-580d-00008e1a20c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.170","pattern":"[ipv4-addr:value = '93.118.139.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab154b7c-e14f-d6c8-fc5c-0000c767b6da","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.128.115","pattern":"[ipv4-addr:value = '93.118.128.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b350f0-adac-fad6-9850-0000da3485d7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.111.10","pattern":"[ipv4-addr:value = '93.118.111.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce62320-fe41-527e-4140-000092006a1b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.117.127.141","pattern":"[ipv4-addr:value = '93.117.127.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff9082a-a979-36a3-8dfd-0000c45348ce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.99.187.41","pattern":"[ipv4-addr:value = '92.99.187.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5bd189-4651-08bc-6405-0000be763f36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.97.111.22","pattern":"[ipv4-addr:value = '92.97.111.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9a6387-60cf-c62a-8a21-0000059a47d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.63.204.159","pattern":"[ipv4-addr:value = '92.63.204.159']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2fbf7f-6d11-d07f-ddb9-0000569ac226","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.254","pattern":"[ipv4-addr:value = '92.62.78.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4594a27-1716-3202-4789-0000e92f0d9f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.240","pattern":"[ipv4-addr:value = '92.62.78.240']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073d42f5-f4d2-7969-8ffd-000054fa8154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.121.148","pattern":"[ipv4-addr:value = '92.62.121.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a51ea9-65a2-6e59-d475-00002029904b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.52.175.65","pattern":"[ipv4-addr:value = '92.52.175.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4854ab28-21c7-9b2c-fb56-0000b9ba2fb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.39.35","pattern":"[ipv4-addr:value = '92.38.39.35']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1321ce97-821b-5cb3-f2ec-0000e73f5366","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.18.36","pattern":"[ipv4-addr:value = '92.38.18.36']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b966e07-ece4-1aa4-cb34-000040a85223","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.31.3.72","pattern":"[ipv4-addr:value = '92.31.3.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baf9165-ffac-977d-af4d-00003a6184b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.251.124.73","pattern":"[ipv4-addr:value = '92.251.124.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0c4b6b-6162-1cf9-7377-0000c2e4c255","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.241.37.47","pattern":"[ipv4-addr:value = '92.241.37.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3524f9a0-e871-7e7a-028a-0000cf857058","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.240.107.161","pattern":"[ipv4-addr:value = '92.240.107.161']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14213a20-33ed-9635-f8f2-0000f66b5a1c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.222.92.92","pattern":"[ipv4-addr:value = '92.222.92.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01d307-f3d7-25b3-3c50-0000f5780985","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.99","pattern":"[ipv4-addr:value = '92.222.108.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b9fe00-c9a7-492c-c4de-0000ffe6248f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.97","pattern":"[ipv4-addr:value = '92.222.108.97']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbece96-348c-dca9-46e5-0000fe244eb8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.96","pattern":"[ipv4-addr:value = '92.222.108.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19935681-a658-7a57-f151-00000573f775","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.127","pattern":"[ipv4-addr:value = '92.222.108.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e946617-615d-5c0a-8099-000004b19d42","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.126","pattern":"[ipv4-addr:value = '92.222.108.126']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79d37ad-c079-72f2-71ff-000006f7231b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.125","pattern":"[ipv4-addr:value = '92.222.108.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f9a20e-7b71-0389-9275-000003b8359e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.122","pattern":"[ipv4-addr:value = '92.222.108.122']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f0f3b4-cd43-4505-56c8-000001fe8bc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.121","pattern":"[ipv4-addr:value = '92.222.108.121']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f7c322-2760-7421-ce1f-0000003ce1f0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.120","pattern":"[ipv4-addr:value = '92.222.108.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5062845-ca49-0c7a-054f-00001d587591","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.119","pattern":"[ipv4-addr:value = '92.222.108.119']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20118d3-393e-320a-4b35-00001c9a1fa6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.118","pattern":"[ipv4-addr:value = '92.222.108.118']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32be0542-347e-7e38-5dfb-000017c6589b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.117","pattern":"[ipv4-addr:value = '92.222.108.117']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b935d4-fd4d-a9d9-8b7b-0000160432ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.116","pattern":"[ipv4-addr:value = '92.222.108.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb754f8-2a3d-16df-5e86-00001580e6c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.114","pattern":"[ipv4-addr:value = '92.222.108.114']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3c15b-e043-1175-699e-000010cff047","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.113","pattern":"[ipv4-addr:value = '92.222.108.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d4f1cd-519e-8076-f370-0000110d9a70","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.112","pattern":"[ipv4-addr:value = '92.222.108.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdda077-14e0-3e14-a194-0000134b2429","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.111","pattern":"[ipv4-addr:value = '92.222.108.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acda90e1-87d1-8dc5-b62f-000012894e1e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.110","pattern":"[ipv4-addr:value = '92.222.108.110']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1a2992-f9c5-693c-ddd3-0000a42678c3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.108","pattern":"[ipv4-addr:value = '92.222.108.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca20495-0771-57d2-9030-0000aeb855c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.106","pattern":"[ipv4-addr:value = '92.222.108.106']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ab552f-9989-fdda-1edf-0000acfeeb90","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.105","pattern":"[ipv4-addr:value = '92.222.108.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac65b9-ea24-edeb-7a5c-0000ad3c81a7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.104","pattern":"[ipv4-addr:value = '92.222.108.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc8f01a-2243-ceb8-0c5a-0000a8739722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.103","pattern":"[ipv4-addr:value = '92.222.108.103']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d948c1c0-31e1-edde-2a3b-0000827a4f0d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.223","pattern":"[ipv4-addr:value = '92.222.104.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4ff156-5b30-a295-e5f2-000083b8253a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.222","pattern":"[ipv4-addr:value = '92.222.104.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4041907a-176f-f4a7-4d34-0000803cf154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.220","pattern":"[ipv4-addr:value = '92.222.104.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b07b1d-11d1-b282-dace-00009d586535","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.219","pattern":"[ipv4-addr:value = '92.222.104.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b74b8b-1033-0689-efdc-00009c9a0f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.218","pattern":"[ipv4-addr:value = '92.222.104.218']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f508561a-05da-7452-9ff1-000097c6483f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.217","pattern":"[ipv4-addr:value = '92.222.104.217']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820f668c-5cf3-bd94-0b66-000096042208","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.216","pattern":"[ipv4-addr:value = '92.222.104.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0107a0-b269-83b8-b991-00009580f666","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.214","pattern":"[ipv4-addr:value = '92.222.104.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2659203-728d-ed93-0261-000090cfe0e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.213","pattern":"[ipv4-addr:value = '92.222.104.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8562a295-5a61-41f1-0e11-0000910d8ad4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.212","pattern":"[ipv4-addr:value = '92.222.104.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6bf32f-d1f2-9703-9088-0000934b348d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.211","pattern":"[ipv4-addr:value = '92.222.104.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6cc3b9-0eff-3c31-be63-000092895eba","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.210","pattern":"[ipv4-addr:value = '92.222.104.210']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bab4a5c-0890-5780-5053-000025e40250","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.209","pattern":"[ipv4-addr:value = '92.222.104.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac7aca-d360-4c4e-87f0-000024266867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.208","pattern":"[ipv4-addr:value = '92.222.104.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec13675b-2b5e-1258-4cb6-00002f7a2f5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.207","pattern":"[ipv4-addr:value = '92.222.104.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1457cd-8e77-f2c3-4817-00002eb8456d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.206","pattern":"[ipv4-addr:value = '92.222.104.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d0677-5e3d-73b2-dee0-00002cfefb34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.205","pattern":"[ipv4-addr:value = '92.222.104.205']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751a36e1-3081-5c4a-8a98-00002d3c9103","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.204","pattern":"[ipv4-addr:value = '92.222.104.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7ea342-bcef-a6fd-f988-000028738786","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.203","pattern":"[ipv4-addr:value = '92.222.104.203']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0570c26e-48d9-4590-32cb-00002bf753e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.201","pattern":"[ipv4-addr:value = '92.222.104.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82f4f4c-a5af-da41-8c91-00001f4c370a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.199","pattern":"[ipv4-addr:value = '92.222.104.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af287fda-6236-eb3d-53e5-00001e8e5d3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.198","pattern":"[ipv4-addr:value = '92.222.104.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489052dd-7ef7-33cc-3352-000014107037","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.196","pattern":"[ipv4-addr:value = '92.222.104.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1990367-fd52-aea9-5a73-00001656ce6e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.195","pattern":"[ipv4-addr:value = '92.222.104.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69e33f1-357a-43f2-82ad-00001794a459","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.194","pattern":"[ipv4-addr:value = '92.222.104.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38faa652-eb26-48a1-7823-000012dbb2dc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.193","pattern":"[ipv4-addr:value = '92.222.104.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffd96c4-5c47-aa14-3f9d-00001319d8eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.192","pattern":"[ipv4-addr:value = '92.222.104.192']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5450cfc0-a7ee-54e2-e61e-000065c2ef12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.69.107","pattern":"[ipv4-addr:value = '92.208.69.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5728a44-55c9-dea4-2020-00003c9b9660","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.26.16","pattern":"[ipv4-addr:value = '92.208.26.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ce940f-016f-c6a9-a1d2-0000d5194971","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.206.133.127","pattern":"[ipv4-addr:value = '92.206.133.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3727915f-4980-e43b-2854-00001fc86643","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.184.109.125","pattern":"[ipv4-addr:value = '92.184.109.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9633aa4a-8e66-5b1e-8763-00009976c867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.130.231.52","pattern":"[ipv4-addr:value = '92.130.231.52']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831e4884-3885-1fc2-6756-0000820ba4de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.118.39.65","pattern":"[ipv4-addr:value = '92.118.39.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f40eca-1455-29f8-257f-0000734ed41a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.118.112.176","pattern":"[ipv4-addr:value = '92.118.112.176']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2341ea5-627f-a0da-2d4a-00008c9c34d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.93.60.178","pattern":"[ipv4-addr:value = '91.93.60.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d32f556-0edf-f5f1-50e7-000084d5025e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.68.200","pattern":"[ipv4-addr:value = '91.92.68.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5adf31a-6000-7fd4-e610-0000317a1ffd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.47.201","pattern":"[ipv4-addr:value = '91.92.47.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d651627e-9759-5864-15f0-0000b7e33170","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.47.187","pattern":"[ipv4-addr:value = '91.92.47.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6a9ae27-3e2b-d465-11ba-00004e48490e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.42.11","pattern":"[ipv4-addr:value = '91.92.42.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651bc543-12fe-cca2-c438-000095b9fccf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.41.148","pattern":"[ipv4-addr:value = '91.92.41.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631c7a77-755b-08d6-2c0d-0000754da722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.40.183","pattern":"[ipv4-addr:value = '91.92.40.183']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed06267a-4835-1948-4127-0000a23e4aaa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.241.57","pattern":"[ipv4-addr:value = '91.92.241.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfaa8dd-e122-5358-a559-00004978685f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.211.46","pattern":"[ipv4-addr:value = '91.92.211.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e219ca1d-e798-f48f-aad5-0000213e1686","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.209.22","pattern":"[ipv4-addr:value = '91.92.209.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2b49bd-9131-aef9-ad46-0000fb8861c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.133.195","pattern":"[ipv4-addr:value = '91.92.133.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26facfde-8429-9951-9029-0000b183a267","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.90.121.157","pattern":"[ipv4-addr:value = '91.90.121.157']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453a7b2d-644e-84fd-62bb-0000421e044c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.83.27.92","pattern":"[ipv4-addr:value = '91.83.27.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1cfa0f5-c10f-9b4c-0ebc-00001afea4f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.80.74.137","pattern":"[ipv4-addr:value = '91.80.74.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82bb1fe1-acc0-df10-ba5a-00006f8efece","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.78.199.11","pattern":"[ipv4-addr:value = '91.78.199.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1bcf0-631b-d3a2-3d47-0000738876d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.63.142.221","pattern":"[ipv4-addr:value = '91.63.142.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8d50de-a766-e254-7bb3-0000d13316c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.55.119.175","pattern":"[ipv4-addr:value = '91.55.119.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8b8fae-5ef9-f5c1-230d-0000e8609070","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.250.7.96","pattern":"[ipv4-addr:value = '91.250.7.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cd63a-ca86-0700-8c10-0000effaa899","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.54.82","pattern":"[ipv4-addr:value = '91.242.54.82']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f6441-4875-15c5-2a13-0000065e8217","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.53.57","pattern":"[ipv4-addr:value = '91.242.53.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c932022c-6ab5-8cbf-6198-000072dc709d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.199.173","pattern":"[ipv4-addr:value = '91.242.199.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6befd5c1-da8e-5f52-2e23-000081bb1896","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.241.153.105","pattern":"[ipv4-addr:value = '91.241.153.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2138ec3-ff7c-9d37-75ff-00004f345b94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.237.41.59","pattern":"[ipv4-addr:value = '91.237.41.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d46d145-1395-f465-f08a-0000d939c769","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.41","pattern":"[ipv4-addr:value = '91.236.172.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f44ae6-37cc-087c-618b-00003bce3c3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.107","pattern":"[ipv4-addr:value = '91.236.172.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051a82e2-2e57-fa6d-9809-0000ca1dc555","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.234.26.163","pattern":"[ipv4-addr:value = '91.234.26.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214dadca-e59b-0975-95ee-00003c9172f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.139.9","pattern":"[ipv4-addr:value = '91.234.139.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d4419-2d47-97f3-a1bd-00004f5238f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.137.10","pattern":"[ipv4-addr:value = '91.234.137.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a786b2c-ef86-6e19-a415-000046b27a2b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.136.237","pattern":"[ipv4-addr:value = '91.234.136.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55eab51f-688b-bbed-e537-0000d3b2af5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.132.155","pattern":"[ipv4-addr:value = '91.234.132.155']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25acc69-9b82-4889-3733-0000830e1f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.167.178","pattern":"[ipv4-addr:value = '91.232.167.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34651542-14e6-cc2f-7795-00000a714e24","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.165.143","pattern":"[ipv4-addr:value = '91.232.165.143']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a30ebd-1894-73ef-cd5b-00001330087c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.99","pattern":"[ipv4-addr:value = '91.231.121.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dd8426-93e2-27f3-cacc-00008ce8c5ed","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.8","pattern":"[ipv4-addr:value = '91.231.121.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d2b711-1346-2fd3-a47f-0000a33fd0c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.247","pattern":"[ipv4-addr:value = '91.231.121.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478f2001-6da2-cd07-802c-00008796e52b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.226","pattern":"[ipv4-addr:value = '91.231.121.226']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36825a02-c210-e83a-1ea3-00001c6b5fc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.199","pattern":"[ipv4-addr:value = '91.231.121.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483326bf-a13c-2f8b-b280-000014b3cc94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.194","pattern":"[ipv4-addr:value = '91.231.121.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cb13c0-a349-3df1-b9c6-0000eaa7d776","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.120.164","pattern":"[ipv4-addr:value = '91.231.120.164']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e455a626-e19e-438c-4fdc-00005988d281","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.84","pattern":"[ipv4-addr:value = '91.230.225.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e338623f-6d0b-bb89-dbf8-00005e817a5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.80","pattern":"[ipv4-addr:value = '91.230.225.80']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae1fdc-cff7-5598-090f-00000566be65","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.72","pattern":"[ipv4-addr:value = '91.230.225.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a07ef0-3227-126f-601f-000006e26a0b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.70","pattern":"[ipv4-addr:value = '91.230.225.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3615f70c-d2d3-9a6c-d771-00002a8fad8b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.209","pattern":"[ipv4-addr:value = '91.230.225.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aaea9d-f407-3846-da6d-000021d3eab6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.206","pattern":"[ipv4-addr:value = '91.230.225.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec27be37-d273-504f-8a6a-0000193d61b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.195","pattern":"[ipv4-addr:value = '91.230.225.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db997c43-27e0-54dd-3b97-000027044965","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.16","pattern":"[ipv4-addr:value = '91.230.225.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42902df9-7848-b7b3-dfde-00002542f73c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.15","pattern":"[ipv4-addr:value = '91.230.225.15']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec672039-8b91-078d-9a61-00009009f238","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.7","pattern":"[ipv4-addr:value = '91.228.33.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd7f2f6-9bbd-ea07-88d5-0000b4b6caf1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.138","pattern":"[ipv4-addr:value = '91.228.33.138']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6c2593-8212-c264-fa46-0000b48b21df","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.123.9","pattern":"[ipv4-addr:value = '91.228.123.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b70b591-13df-c785-14e8-000076b2c405","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.122.241","pattern":"[ipv4-addr:value = '91.228.122.241']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfafcbc-2ed5-3175-6280-000059986754","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.86.109","pattern":"[ipv4-addr:value = '91.227.86.109']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bd35830-f7ce-435e-88af-00001f15c7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.226.66","pattern":"[ipv4-addr:value = '91.227.226.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913edb1b-344a-a4d8-734a-00001dd4e2d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.115.112","pattern":"[ipv4-addr:value = '91.226.115.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7f2fa6-b51e-ffc6-45f1-0000f66fe864","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.113.156","pattern":"[ipv4-addr:value = '91.226.113.156']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f3e1a0-a270-7f42-30d2-0000dce944d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.224.92.74","pattern":"[ipv4-addr:value = '91.224.92.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf1926d-733f-031a-dd43-00006bb18e5e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.69.206","pattern":"[ipv4-addr:value = '91.215.69.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dface50-b895-17ce-f254-000063848c34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.146.234","pattern":"[ipv4-addr:value = '91.215.146.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9056b3-5256-93c8-dafc-0000e8033007","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.214.138.207","pattern":"[ipv4-addr:value = '91.214.138.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0086f5ad-50e0-2685-748d-0000739d779c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.245.145","pattern":"[ipv4-addr:value = '91.207.245.145']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a86b8eb-34dd-4155-3424-0000ddd3a832","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.102.58","pattern":"[ipv4-addr:value = '91.207.102.58']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7390595-4700-b18f-47b8-0000d9bf9ec4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.198.77.230","pattern":"[ipv4-addr:value = '91.198.77.230']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fa9132-3a33-aaae-b6f5-0000cf9b9d74","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.196.228.252","pattern":"[ipv4-addr:value = '91.196.228.252']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3d28da-797f-f8d7-d02b-0000eb816b7f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.7","pattern":"[ipv4-addr:value = '91.196.111.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efb4761-b9fc-18c6-71fa-000031bd6303","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.127","pattern":"[ipv4-addr:value = '91.196.111.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ffb6e5-57e1-d9d6-a637-0000a4e822c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.194.91.202","pattern":"[ipv4-addr:value = '91.194.91.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52425138-5b06-81ea-6e36-0000ae103cf6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.192.204.163","pattern":"[ipv4-addr:value = '91.192.204.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bcbab1-12f0-90c3-7d82-0000738947fa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.188.247.151","pattern":"[ipv4-addr:value = '91.188.247.151']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2b4bfc-f4aa-1a80-2b98-0000fce43eaf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.186.249.112","pattern":"[ipv4-addr:value = '91.186.249.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7feede-58cc-9abe-306e-0000fdea38bc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.170.9.78","pattern":"[ipv4-addr:value = '91.170.9.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8475d5d-1184-0070-0738-0000bf2c053a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.16.243.113","pattern":"[ipv4-addr:value = '91.16.243.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa9c42b-92b1-011a-d25e-00004f9ad744","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.152.6.16","pattern":"[ipv4-addr:value = '91.152.6.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da80088-f181-aa95-14ed-000056b9fcc6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.150.213.146","pattern":"[ipv4-addr:value = '91.150.213.146']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de7186d-3dcd-4e98-6786-000066dc2376","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.146.167.76","pattern":"[ipv4-addr:value = '91.146.167.76']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca187a66-91d6-d13b-d96c-000026942d36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.132.23.25","pattern":"[ipv4-addr:value = '91.132.23.25']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb2c5b8-750b-36ba-fb58-000062f1dd10","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.196.49","pattern":"[ipv4-addr:value = '91.132.196.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df32e150-09e3-fbdb-4e13-0000c855e3a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.125.26","pattern":"[ipv4-addr:value = '91.132.125.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a826ad91-18ef-957f-91f5-000065de7f05","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.124.141.50","pattern":"[ipv4-addr:value = '91.124.141.50']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d22902f-ed47-3e5f-2591-000047f07526","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.103.249.254","pattern":"[ipv4-addr:value = '91.103.249.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa1381cc-f50b-0035-e956-0000581362ca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.70.76.142","pattern":"[ipv4-addr:value = '90.70.76.142']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2dbb16-2c75-a292-84b6-0000e5c8d2d3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.52.100.31","pattern":"[ipv4-addr:value = '90.52.100.31']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376e3272-58e6-7fe8-578a-0000703dceb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 90.5.122.47","pattern":"[ipv4-addr:value = '90.5.122.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caa1b1b-01b5-3074-c36c-000086b09df1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.3.109.42","pattern":"[ipv4-addr:value = '90.3.109.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecab3ee5-8534-2bb3-aad4-0000478b4584","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.247.51.22","pattern":"[ipv4-addr:value = '90.247.51.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f689efdb-f10e-f1f8-9ceb-0000f79aa699","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.230.22.194","pattern":"[ipv4-addr:value = '90.230.22.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc1d861-c7fd-e16a-ee0a-0000510d78ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.188.231.181","pattern":"[ipv4-addr:value = '90.188.231.181']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]}]}