{
  "Event": {
    "analysis": "1",
    "date": "2026-07-07",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-07-08",
    "publish_timestamp": "1783504803",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1783501204",
    "uuid": "08e34e6a-8b78-459d-b53d-c9724c6435cd",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T00:00:03+00:00",
        "timestamp": "1783468804",
        "to_ids": false,
        "type": "url",
        "uuid": "e1d5e5fc-e5a5-4531-8bca-fe78eb698551",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/bb7434cffd1ffcb3b76b20aad97c515c417ae513",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T00:00:04+00:00",
        "timestamp": "1783468805",
        "to_ids": true,
        "type": "domain",
        "uuid": "0406c546-2454-498e-89fa-77b89a1dd390",
        "value": "body.light",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T01:00:03+00:00",
        "timestamp": "1783472403",
        "to_ids": false,
        "type": "url",
        "uuid": "99bd6d54-cce4-4b2a-b207-0f4fa35911d0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b6976916469a2ec4e3e4a5a06ee3bdf92e15264a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T08:00:02+00:00",
        "timestamp": "1783497602",
        "to_ids": false,
        "type": "url",
        "uuid": "9b6faaf5-2396-4aa1-a069-ca5c406e34e9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a6b7974906eb0a9b9160eb3d11370384626ee640",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T08:00:02+00:00",
        "timestamp": "1783497602",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e3b25c2-8140-49d2-b38f-97448e968027",
        "value": "ercmload23nd.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T08:00:02+00:00",
        "timestamp": "1783497603",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a3a9ee7-91c9-4d8c-915d-552025ac6c93",
        "value": "nctips.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T08:00:03+00:00",
        "timestamp": "1783497603",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4095cd3-1a2f-4874-85a2-4a69c4ef9933",
        "value": "nts-edoced.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:02+00:00",
        "timestamp": "1783501203",
        "to_ids": false,
        "type": "url",
        "uuid": "7b913bf1-2679-4336-b441-bc433fbf19ff",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4c69aa86139a3e7c467b744584fb34b1a5eb9996",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:03+00:00",
        "timestamp": "1783501203",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e85bbf6-2c16-42b1-9df3-cb350fc6312b",
        "value": "ticketreceipt.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:03+00:00",
        "timestamp": "1783501203",
        "to_ids": false,
        "type": "url",
        "uuid": "0b5c59d0-67e1-4b32-9b18-e32035d032e1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6bff52724a6e7efb48656595fd7cdce55a674ed2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:03+00:00",
        "timestamp": "1783501203",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe3eeb21-c570-477d-97be-7c0358298bba",
        "value": "documento.tjspbr.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:03+00:00",
        "timestamp": "1783501203",
        "to_ids": true,
        "type": "domain",
        "uuid": "84ff2187-33b2-4f3d-83aa-1773dd7b74e1",
        "value": "documntacion.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:03+00:00",
        "timestamp": "1783501204",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b66ef0d-22df-4633-a07f-29420246b6e3",
        "value": "st-pdf.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-08T09:00:04+00:00",
        "timestamp": "1783501204",
        "to_ids": true,
        "type": "domain",
        "uuid": "5182d896-e92f-4841-8afa-b3ecb8bbf653",
        "value": "vocenacopadavisa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}