{
    "count": 14,
    "indicators": [
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/pan-unit42\/tweets\/master\/2022-08-29-IOCs-for-Monster-Libra-TA551-IcedID-with-Cobalt-Stike.txt",
            "ioc_type": "url",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:07:44",
            "last_seen": "2026-08-06 19:46:52"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/pan-unit42\/tweets\/master\/2022-08-10-IOCs-for-IcedID-and-Cobalt-Strike.txt",
            "ioc_type": "url",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:07:44",
            "last_seen": "2026-08-06 19:46:52"
        },
        {
            "ioc_value": "https:\/\/securityintelligence.com\/new-banking-trojan-icedid-discovered-by-ibm-x-force-research\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/blogs.juniper.net\/en-us\/threat-research\/covid-19-and-fmla-campaigns-used-to-install-new-icedid-banking-malware",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/polyglot-file-icedid-payload",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/ta551-shathak-icedid\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.mandiant.com\/resources\/blog\/melting-unc2198-icedid-to-ransomware-operations",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/melting-unc2198-icedid-to-ransomware-operations",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/security-brief-ta571-delivers-icedid-forked-loader",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/github.com\/PaloAltoNetworks\/Unit42-timely-threat-intel\/blob\/main\/2023-10-18-IOCs-from-IcedID-forked-variant-with-VNC-and-Cobalt-Strike.txt",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:10",
            "last_seen": "2026-08-06 14:43:51"
        },
        {
            "ioc_value": "https:\/\/github.com\/pan-unit42\/tweets\/blob\/master\/2022-08-08-IOCs-for-IcedID-and-Cobalt-Strike.txt",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:50"
        },
        {
            "ioc_value": "https:\/\/github.com\/pan-unit42\/tweets\/blob\/master\/2022-01-12-IOCs-for-IcedID-with-Cobalt-Strike-and-DarkVNC.txt",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:49"
        },
        {
            "ioc_value": "https:\/\/www.fireeye.com\/blog\/threat-research\/2021\/02\/melting-unc2198-icedid-to-ransomware-operations.html",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/mphasis.com\/content\/dam\/mphasis-com\/global\/en\/home\/services\/cybersecurity\/icedid-infection-to-dagon-locker-ransomware-apr29-22-7.pdf",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        }
    ]
}