{
    "count": 12,
    "indicators": [
        {
            "ioc_value": "https:\/\/github.com\/trasherwithadollarsign\/Trashers-Malware-Repo\/raw\/main\/Trojan\/RedLineStealer.exe",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:07:42",
            "last_seen": "2026-08-24 11:11:39"
        },
        {
            "ioc_value": "redline-boutique.fr",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:10:24",
            "last_seen": "2026-08-24 01:43:15"
        },
        {
            "ioc_value": "https:\/\/www.welivesecurity.com\/en\/eset-research\/life-crooked-redline-analyzing-infamous-infostealers-backend\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-23 13:09:20"
        },
        {
            "ioc_value": "https:\/\/www.kroll.com\/en\/publications\/cyber\/redlinestealer-malware",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-23 13:09:20"
        },
        {
            "ioc_value": "https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/new-redline-stealer-distributed-using-coronavirus-themed-email-campaign",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-23 13:09:20"
        },
        {
            "ioc_value": "https:\/\/www.splunk.com\/en_us\/blog\/security\/do-not-cross-the-redline-stealer-detections-and-analysis.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-23 13:09:20"
        },
        {
            "ioc_value": "https:\/\/veriti.ai\/blog\/veriti-research\/from-chatgpt-to-redline-stealer-the-dark-side-of-openai-and-google-bard\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-23 13:09:20"
        },
        {
            "ioc_value": "https:\/\/github.com\/executemalware\/Malware-IOCs\/blob\/main\/2022-05-09%20Redline%20IOCs",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-23 09:01:37"
        },
        {
            "ioc_value": "https:\/\/urlhaus.abuse.ch\/browse\/tag\/RedLineStealer\/",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-23 09:01:37"
        },
        {
            "ioc_value": "https:\/\/threatresearch.ext.hp.com\/redline-stealer-disguised-as-a-windows-11-upgrade\/",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-23 09:01:37"
        },
        {
            "ioc_value": "win.redline",
            "ioc_type": "malware",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-12 00:08:24",
            "last_seen": "2026-08-12 00:08:24"
        },
        {
            "ioc_value": "agora-pos.theredline.be",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:12",
            "last_seen": "2026-08-06 14:47:33"
        }
    ]
}