{ "Event": { "analysis": "1", "date": "2026-06-10", "extends_uuid": "", "info": "Maltrail IOC for 2026-06-11", "publish_timestamp": "1781215203", "published": true, "threat_level_id": "2", "timestamp": "1781197203", "uuid": "10a9ab63-cbe7-4d03-82a5-2fbe04413b9f", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:04+00:00", "timestamp": "1781164804", "to_ids": false, "type": "url", "uuid": "b0d55136-7b31-467c-93b2-08327e013e2a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/859051f9a5b0fbc8ec8473a84fd53b04bb3004b1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:04+00:00", "timestamp": "1781164805", "to_ids": true, "type": "domain", "uuid": "3f955067-a95f-40de-8fb4-b63ff2acbfd9", "value": "ak.wwxik2s.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:05+00:00", "timestamp": "1781164805", "to_ids": true, "type": "domain", "uuid": "3354b994-9203-4fd6-a121-315f34aa3532", "value": "colesms.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:05+00:00", "timestamp": "1781164805", "to_ids": true, "type": "domain", "uuid": "e5232be1-470c-45c5-a7d5-c0ce34173e34", "value": "wwxik2s.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "overlord", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:05+00:00", "timestamp": "1781164805", "to_ids": false, "type": "url", "uuid": "f2c9fe54-e8a8-4fb8-a29f-db694b7124d7", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e89fc8cacba42f5b8d037a10946cbe76e4bf44ed", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "overlord", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:05+00:00", "timestamp": "1781164805", "to_ids": false, "type": "url", "uuid": "0fb605b7-d9de-4b4e-a59e-f21c39554dcf", "value": "https://tria.ge/260610-t9wr4sex5k/static1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "overlord", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:05+00:00", "timestamp": "1781164805", "to_ids": true, "type": "ip-dst", "uuid": "0d784124-2a00-48a0-9f39-ed7e739b636a", "value": "192.3.16.34", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164806", "to_ids": false, "type": "url", "uuid": "e96595b7-51bf-47d6-8f98-e26c1b37941a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/4bdf5fc99069086b6b93c180d1d63707fa2841e4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164806", "to_ids": true, "type": "domain", "uuid": "bb7d19d4-36e6-46d2-bd9f-1d0ac9b79791", "value": "helloworld-sub.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164806", "to_ids": false, "type": "url", "uuid": "c614cbcf-7daf-4fc6-b900-15a6c134b737", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1899bf672dcbfbd75cfd1d436db5eead7a3fffa1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164806", "to_ids": true, "type": "domain", "uuid": "018e73eb-dd59-4b32-bf47-1ab6d1e0a700", "value": "oxdo.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bankerclip", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164806", "to_ids": false, "type": "url", "uuid": "67ccc7e6-af0f-48b2-9ff1-1511208df8c6", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e6dcdd819144f27dd90f986ba9d07b4db4a58a02", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bankerclip", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164806", "to_ids": false, "type": "url", "uuid": "3c2cd863-d8c7-426a-bcf9-86e35de2edb6", "value": "https://x.com/rifteyy/status/2064779981788446777", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bankerclip", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:06+00:00", "timestamp": "1781164807", "to_ids": false, "type": "url", "uuid": "018538ba-eda3-4565-96a7-891d0b4a3489", "value": "https://app.any.run/tasks/ecf8704c-bfcc-47d1-91ee-7867d06efaf6", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bankerclip", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T08:00:07+00:00", "timestamp": "1781164807", "to_ids": true, "type": "domain", "uuid": "37ea3f93-188d-4fce-af41-f006b680b1fc", "value": "gomezdown.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:03+00:00", "timestamp": "1781168404", "to_ids": false, "type": "url", "uuid": "1d2a6500-5004-40d5-ad23-457b360d474f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cac5c21b0c2630cec988ce50dee69466ccc5e24c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:04+00:00", "timestamp": "1781168404", "to_ids": false, "type": "url", "uuid": "9bf28675-47a4-4fcb-b693-9b87e499a3db", "value": "https://x.com/Fact_Finder03/status/2064988506645201384", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:04+00:00", "timestamp": "1781168404", "to_ids": true, "type": "ip-dst", "uuid": "155ee1ac-ede9-47f5-84eb-219afa435b2a", "value": "204.10.194.239", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:04+00:00", "timestamp": "1781168404", "to_ids": false, "type": "url", "uuid": "cc1e24f0-9070-42dd-b240-2c20a81b10ce", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3a666616b48662049435aa6a4e3c5eda123b9cf7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:04+00:00", "timestamp": "1781168404", "to_ids": true, "type": "domain", "uuid": "3b77d708-83cc-4fc5-ac52-8282863b48c4", "value": "cdn.ytrtyab.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:04+00:00", "timestamp": "1781168404", "to_ids": true, "type": "domain", "uuid": "44b27be5-fdd7-4a12-a2c0-3bf2d49286e1", "value": "cdn.zeqfge.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:04+00:00", "timestamp": "1781168404", "to_ids": false, "type": "url", "uuid": "0c7584d6-aa1d-4aa9-9486-ea405310527f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/edd9ef8608bebc5c8948ff07100f6ef46fa09190", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:05+00:00", "timestamp": "1781168405", "to_ids": false, "type": "url", "uuid": "7bb47115-1dbb-42c6-9339-13b504477ad6", "value": "https://x.com/Malwarehunterr/status/2064824110941876458", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:05+00:00", "timestamp": "1781168405", "to_ids": false, "type": "url", "uuid": "c270c6ec-5b41-4c68-b7fc-0bef59d1d3af", "value": "https://www.virustotal.com/gui/file/7b03fb383a5ce784a3cb9b0f8a76a84e984d14e553de5d98faff3d07d9793085/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:05+00:00", "timestamp": "1781168405", "to_ids": true, "type": "ip-dst", "uuid": "5a709bc4-706d-4808-b6ad-085d5ebe577d", "value": "65.21.96.129", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:05+00:00", "timestamp": "1781168405", "to_ids": false, "type": "url", "uuid": "9a5c3b4f-18d0-40b1-a972-f2371c0b985a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/bd2a70c2c18803ba4d3c43c4212fe86853d6e3d4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:05+00:00", "timestamp": "1781168406", "to_ids": true, "type": "domain", "uuid": "b6bdf801-e037-4c8f-886d-43dcdf18b503", "value": "micronsoftwares.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:06+00:00", "timestamp": "1781168406", "to_ids": false, "type": "url", "uuid": "e9c3e87d-fb04-42ea-9ca8-a8b617c8ca7d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5a14d790a9ba314b5ece2111b40eb8d106fb7389", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:06+00:00", "timestamp": "1781168406", "to_ids": false, "type": "url", "uuid": "941459b0-e287-4cf0-b5be-2cc36bf4758b", "value": "https://x.com/Fact_Finder03/status/2064978075104997570", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:06+00:00", "timestamp": "1781168406", "to_ids": true, "type": "ip-dst", "uuid": "fd2e9bb0-cd76-439d-a9e8-1c110e381cbf", "value": "149.104.87.94", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:06+00:00", "timestamp": "1781168406", "to_ids": true, "type": "ip-dst", "uuid": "63167d53-eeae-4cde-8b7c-1b39718703df", "value": "38.60.224.210", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:06+00:00", "timestamp": "1781168407", "to_ids": true, "type": "domain", "uuid": "7f0cc6d3-3215-48b7-ac38-587e0fbba5d3", "value": "imbyter.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:07+00:00", "timestamp": "1781168407", "to_ids": true, "type": "domain", "uuid": "df4db014-f7bf-421b-a663-9aa8830f6ff9", "value": "blog.imbyter.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:07+00:00", "timestamp": "1781168407", "to_ids": true, "type": "domain", "uuid": "20ce8520-269f-48e2-b5b8-b56ad96b8a6d", "value": "color.imbyter.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "shadowext_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T09:00:07+00:00", "timestamp": "1781168407", "to_ids": true, "type": "domain", "uuid": "6d6df8f1-f1b9-4c62-a22c-2a3f9e223f8f", "value": "public.mexc.co.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:03+00:00", "timestamp": "1781172003", "to_ids": false, "type": "url", "uuid": "05853b0a-b2fc-4300-bb31-4bd4bd145e1e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f7c0ad302c64ba5a204772f825c6402b7b9fdb3c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:03+00:00", "timestamp": "1781172003", "to_ids": false, "type": "url", "uuid": "5828d2bd-4556-4d01-87e8-efa4af1a8fa5", "value": "https://x.com/malwrhunterteam/status/2064997548629111100", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:03+00:00", "timestamp": "1781172003", "to_ids": false, "type": "url", "uuid": "9785cdb3-54b9-4d4f-a0bd-756ddb8b80f5", "value": "https://www.virustotal.com/gui/file/8f7cbdf63a7d08ffc2035a80886081798ce77b519b514eea574781bb54120125/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:03+00:00", "timestamp": "1781172003", "to_ids": false, "type": "url", "uuid": "7ab3bb5d-9a05-4143-b644-15575a45d3a1", "value": "https://www.virustotal.com/gui/file/adff46b9cdccb4c75b3b8a236b3c799e4d6184a3d8ada97bf7f076db20102165/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:03+00:00", "timestamp": "1781172004", "to_ids": true, "type": "ip-dst", "uuid": "e976e595-a0f0-423b-9fd0-67752199d030", "value": "64.89.162.159", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gh0strat", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:04+00:00", "timestamp": "1781172004", "to_ids": false, "type": "url", "uuid": "c2cfeb8e-0c8e-4e25-94cf-fef54874bfd4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c5a822cd8783de9363ff8e504528da5a08f515ca", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gh0strat", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:04+00:00", "timestamp": "1781172004", "to_ids": false, "type": "url", "uuid": "69a3078c-539e-4a4a-a437-883b8a46122d", "value": "https://x.com/smica83/status/2064974323132121555", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gh0strat", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:04+00:00", "timestamp": "1781172004", "to_ids": false, "type": "url", "uuid": "2e9701d9-a94c-413e-b177-7238c2878f53", "value": "https://www.virustotal.com/gui/file/446aad1d86aaf82a32f7e63bd0dd34cb2ac85ca2a412b9bea2122fb5506ddac1/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gh0strat", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:04+00:00", "timestamp": "1781172005", "to_ids": true, "type": "ip-dst", "uuid": "0c259249-2d4a-4a0f-97d7-10edcd9bc079", "value": "8.218.196.168", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gh0strat", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T10:00:05+00:00", "timestamp": "1781172005", "to_ids": true, "type": "domain", "uuid": "6d06a9f8-ff1b-4c29-9470-02a13ca87d3f", "value": "jiugui22.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lucid", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T11:00:02+00:00", "timestamp": "1781175602", "to_ids": false, "type": "url", "uuid": "80d3bd66-667e-47a5-8e69-eec41c09e01d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/21269b305abd633d1278097eace5015dec234fda", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lucid", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T11:00:02+00:00", "timestamp": "1781175602", "to_ids": false, "type": "url", "uuid": "8ca30785-5397-4c20-b994-29fa57943313", "value": "https://x.com/malwrhunterteam/status/2065009236363432262", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lucid", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T11:00:02+00:00", "timestamp": "1781175602", "to_ids": false, "type": "url", "uuid": "77f9559d-d105-4849-bec3-d6f8f3773327", "value": "https://tria.ge/260611-l2ws5sb12k/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lucid", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T11:00:03+00:00", "timestamp": "1781175603", "to_ids": true, "type": "ip-dst", "uuid": "8816fca2-dbff-400b-b6d6-e846986d7347", "value": "104.234.18.91", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:04+00:00", "timestamp": "1781179205", "to_ids": false, "type": "url", "uuid": "a6490550-3276-4a14-a6ab-cb36b420285e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/86d74a40f342cf9d04b00df2b1a4319cd6f939da", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:05+00:00", "timestamp": "1781179205", "to_ids": false, "type": "url", "uuid": "b3045012-cebc-4d89-94db-74a40ad79898", "value": "https://x.com/smica83/status/2065030367979958438", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:05+00:00", "timestamp": "1781179206", "to_ids": true, "type": "domain", "uuid": "36411357-57ad-4f90-8401-8c4f08a43259", "value": "costumes-met-zum-refinance.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:06+00:00", "timestamp": "1781179206", "to_ids": false, "type": "url", "uuid": "273ce5f7-8f03-4757-baaf-34516e6143be", "value": "https://api.github.com/repos/stamparm/maltrail/commits/9a51200f3b90c7af54c220f2526db6f36d63294d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:06+00:00", "timestamp": "1781179206", "to_ids": true, "type": "domain", "uuid": "c2fbb649-12b8-4652-9aa6-52998783d536", "value": "cloudflare1.vercel.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:06+00:00", "timestamp": "1781179206", "to_ids": false, "type": "url", "uuid": "a7aa93bd-6175-45f2-b6c7-3de43c4149bd", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3c2f5bddea4103e962b36726f2834cc8c64f1ba0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:06+00:00", "timestamp": "1781179206", "to_ids": true, "type": "domain", "uuid": "c78b5401-ae00-4a63-a6b3-241f9e040f19", "value": "vscode-ip-address-checking.vercel.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:06+00:00", "timestamp": "1781179207", "to_ids": true, "type": "domain", "uuid": "0d18a688-f68d-4b38-bfc3-7484faf52957", "value": "vscode-ip-checking-nine.vercel.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:07+00:00", "timestamp": "1781179207", "to_ids": false, "type": "url", "uuid": "91a361e2-127d-4108-8a8b-0728d6784962", "value": "https://api.github.com/repos/stamparm/maltrail/commits/959f5ed026a208d895d3e95589cfa63b75e56be1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:07+00:00", "timestamp": "1781179207", "to_ids": false, "type": "url", "uuid": "4403f356-a0a0-4bf9-9aec-db58bd3bcdb2", "value": "https://x.com/KirkDerpca/status/2065027462761787802", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:07+00:00", "timestamp": "1781179207", "to_ids": true, "type": "domain", "uuid": "739a338f-eaad-4267-bb7c-1f3b6f649207", "value": "datasecure-service.vercel.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lucid", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:07+00:00", "timestamp": "1781179207", "to_ids": false, "type": "url", "uuid": "604a1bc5-72bb-434f-a086-a8ba545a1165", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ecf3a4dc48d24114e106ecf6de6e0f12e89a97e1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lucid", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T12:00:07+00:00", "timestamp": "1781179207", "to_ids": true, "type": "domain", "uuid": "d55f8e77-792c-44ce-af2d-04a347f06c43", "value": "proemre.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T13:00:02+00:00", "timestamp": "1781182802", "to_ids": false, "type": "url", "uuid": "61032429-cda2-40b3-bcb6-669f7948b871", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c1138ed0d2bb5745191ebacaf3710c03a7ae5418", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T13:00:02+00:00", "timestamp": "1781182802", "to_ids": false, "type": "url", "uuid": "0564ee0d-57fd-4f0b-87d6-5264ce4def9e", "value": "https://x.com/blackorbird/status/2064727597435752846", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T13:00:02+00:00", "timestamp": "1781182802", "to_ids": false, "type": "url", "uuid": "8472bff2-3897-4825-9a2a-2055e429deda", "value": "https://mp.weixin.qq.com/s/jH60_sYtZjJZWtVc5d277g", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T13:00:02+00:00", "timestamp": "1781182802", "to_ids": true, "type": "ip-dst", "uuid": "de5cae8c-30bd-4389-803c-853dbd1ff456", "value": "163.245.220.108", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T13:00:02+00:00", "timestamp": "1781182803", "to_ids": true, "type": "domain", "uuid": "c3aa9fab-e28e-4d09-b69f-92deecdf38c9", "value": "downloadclouddata.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:03+00:00", "timestamp": "1781186403", "to_ids": false, "type": "url", "uuid": "4b8a3910-817f-47cb-9e52-34d1e934501e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/112335dc55320341bce6b7f22c879bc244edbc26", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:03+00:00", "timestamp": "1781186403", "to_ids": true, "type": "domain", "uuid": "760faff4-b04e-466a-981a-eb511b4a712d", "value": "3d.rcogenasia.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:03+00:00", "timestamp": "1781186404", "to_ids": true, "type": "domain", "uuid": "77d6afcd-34ff-4c1c-af25-a15c4b14d232", "value": "aluppaa.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:04+00:00", "timestamp": "1781186404", "to_ids": true, "type": "domain", "uuid": "ae404c6a-ca68-4ff3-8313-ad0a4225294a", "value": "baehtz-vermessung.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:04+00:00", "timestamp": "1781186404", "to_ids": true, "type": "domain", "uuid": "a7a737ad-db3b-43d3-a2b8-5b4ca8d63ff9", "value": "chadapress.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:04+00:00", "timestamp": "1781186404", "to_ids": true, "type": "domain", "uuid": "4147a47b-5077-46a6-aa4c-5288ab286670", "value": "claude-code-docs-dvlr2jpuuw.edgeone.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:04+00:00", "timestamp": "1781186404", "to_ids": true, "type": "domain", "uuid": "b208d68b-3e4e-4cf0-baab-dc72746ddf49", "value": "claude-docs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:04+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "7fc02131-413d-403e-9713-0fc9023b7109", "value": "clintonlakemarina.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:05+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "ea780602-b2ae-454f-9459-3871e131230a", "value": "cpanel.rcogenasia.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:05+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "1783caba-8994-4d18-a5df-e061aadaa81c", "value": "culpadehuk.hubtischonline.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:05+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "367e5859-a9b6-44bd-933f-5b6be08fa89d", "value": "hubtischonline.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:05+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "77d0762d-670f-422d-bb4b-dab592ae3684", "value": "illummxiem.hubtischonline.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:05+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "932aa740-622f-4e4b-8975-6ec174d6b2d1", "value": "kh.baehtz-vermessung.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:05+00:00", "timestamp": "1781186405", "to_ids": true, "type": "domain", "uuid": "a90d8293-fe95-410b-a387-a6527bc5fa24", "value": "macos-claude.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186406", "to_ids": true, "type": "domain", "uuid": "a9eed5fe-ba31-4953-bd15-ac04057908dc", "value": "mail.aluppaa.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186406", "to_ids": true, "type": "domain", "uuid": "97a04321-082a-4c63-8560-5b9c7128abf6", "value": "meinurlaubinkroatien.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186406", "to_ids": true, "type": "domain", "uuid": "984d2c2e-a045-4b7d-afd5-f26e942de9d7", "value": "nesciuntctsti.hubtischonline.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186406", "to_ids": true, "type": "domain", "uuid": "683dd00d-c396-4fd8-94bc-8991fda741ee", "value": "porrowtqjx.hubtischonline.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186406", "to_ids": true, "type": "domain", "uuid": "c05709de-4c7a-4f6f-8f0d-c6b6591d0200", "value": "rcogenasia.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186406", "to_ids": true, "type": "domain", "uuid": "e53250d4-ffe2-43c6-9a5b-6f4e39cd61b5", "value": "un.meinurlaubinkroatien.de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:06+00:00", "timestamp": "1781186407", "to_ids": true, "type": "domain", "uuid": "661dd2bb-8a45-4f39-b773-1e774ed6f463", "value": "wap.windblowestate.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186407", "to_ids": true, "type": "domain", "uuid": "cce40c0c-a7ae-42f9-b3d7-dc68b533500b", "value": "wingthings-texas.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186407", "to_ids": false, "type": "url", "uuid": "96933051-b2ea-4b84-87ce-9d45f112422c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8862a819e18a0489f94da0d1403089f1f128bc69", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186407", "to_ids": false, "type": "url", "uuid": "da1ba83f-ba4c-4613-9b66-3bf7533cfe10", "value": "https://x.com/smica83/status/2065030655214317842", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186407", "to_ids": true, "type": "domain", "uuid": "64ea205f-3664-4c77-84df-49c6db835178", "value": "excellence-analyze-experiment-installing.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186407", "to_ids": false, "type": "url", "uuid": "5f3f3a58-b755-42d3-9322-25dca2a350d9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5355f5b99b0b9ad9f7053206439a16cd806a1036", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186407", "to_ids": false, "type": "url", "uuid": "f280bf08-c36e-49e4-b8dd-e46a4445da85", "value": "https://x.com/smica83/status/2065031023402824046", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T14:00:07+00:00", "timestamp": "1781186408", "to_ids": true, "type": "domain", "uuid": "f4f3ecdf-2cc7-467a-bead-ed5cd6a0ef00", "value": "premiere-sunday-citizens-afford.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:02+00:00", "timestamp": "1781190003", "to_ids": false, "type": "url", "uuid": "e6d65246-ed44-48fc-8371-f3251f052eb2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/46a14575b5393b070a5ff10c0c179b6b89622ddb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:03+00:00", "timestamp": "1781190003", "to_ids": true, "type": "ip-dst", "uuid": "65759c3a-9dd2-4371-95de-403c8e050861", "value": "136.0.10.99", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:03+00:00", "timestamp": "1781190003", "to_ids": true, "type": "ip-dst", "uuid": "d6c79b4a-6398-47d9-915e-dd97248e1fc0", "value": "136.0.7.192", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:03+00:00", "timestamp": "1781190003", "to_ids": true, "type": "ip-dst", "uuid": "6c840d2e-5fe8-4d37-ae76-79ebd3abe9e6", "value": "136.0.8.67", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:03+00:00", "timestamp": "1781190004", "to_ids": true, "type": "ip-dst", "uuid": "27aab8ea-14a2-4d35-a2c9-d4ae7431098a", "value": "142.111.135.156", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:04+00:00", "timestamp": "1781190004", "to_ids": true, "type": "ip-dst", "uuid": "560cd63f-fc4f-4c2d-837d-70cb5dffac3a", "value": "166.88.90.78", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:04+00:00", "timestamp": "1781190004", "to_ids": true, "type": "ip-dst", "uuid": "d5c8979b-e8de-4490-9949-6eb5529cfc2a", "value": "185.132.54.136", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:04+00:00", "timestamp": "1781190004", "to_ids": true, "type": "ip-dst", "uuid": "a340809e-d238-4173-906a-e45608201f47", "value": "216.173.64.154", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:04+00:00", "timestamp": "1781190005", "to_ids": true, "type": "ip-dst", "uuid": "3855d3b2-53c7-449b-b838-a07865ec432b", "value": "216.173.64.48", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:05+00:00", "timestamp": "1781190005", "to_ids": true, "type": "ip-dst", "uuid": "030d16d7-b0a7-4703-97f3-8ace10937403", "value": "216.173.65.149", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:05+00:00", "timestamp": "1781190005", "to_ids": true, "type": "ip-dst", "uuid": "aabe0d99-2a38-4fb9-b0f8-ed4fb071431a", "value": "23.27.125.5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:05+00:00", "timestamp": "1781190005", "to_ids": true, "type": "ip-dst", "uuid": "787d0830-6c03-4cc5-aedb-3ca006b46c78", "value": "23.27.142.71", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:05+00:00", "timestamp": "1781190005", "to_ids": true, "type": "ip-dst", "uuid": "87169422-3f22-4428-b3cc-94a92bc9104f", "value": "23.27.164.151", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:05+00:00", "timestamp": "1781190005", "to_ids": true, "type": "ip-dst", "uuid": "a321b655-fdc1-4a96-8439-45d0c74149ab", "value": "23.27.175.16", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:05+00:00", "timestamp": "1781190006", "to_ids": true, "type": "ip-dst", "uuid": "7e478a08-bb47-4b44-8712-2fb9d1370ca4", "value": "23.27.175.37", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:06+00:00", "timestamp": "1781190006", "to_ids": true, "type": "ip-dst", "uuid": "3e8ad37e-ff6f-4a8f-a9cc-97a836fb9ece", "value": "23.27.202.105", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:06+00:00", "timestamp": "1781190006", "to_ids": true, "type": "ip-dst", "uuid": "f410bd9b-93ca-4b39-8931-2dcf073b4f7b", "value": "23.27.50.182", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:06+00:00", "timestamp": "1781190006", "to_ids": true, "type": "ip-dst", "uuid": "bb95359c-77d8-43c1-a157-f2dac2153e91", "value": "23.27.51.243", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "georgeginx", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:06+00:00", "timestamp": "1781190006", "to_ids": true, "type": "ip-dst", "uuid": "6e4643d0-4956-4467-abc2-74a6e5424496", "value": "45.249.90.92", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:06+00:00", "timestamp": "1781190006", "to_ids": false, "type": "url", "uuid": "f5a15e97-c03c-4dca-a3de-ef9ed615919a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e4caf146451b10a86e7d7caff1755edff91e6182", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:06+00:00", "timestamp": "1781190006", "to_ids": true, "type": "domain", "uuid": "d69b7cc2-7f9c-40fc-8188-2b0a9067abc8", "value": "appuntistack.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T15:00:07+00:00", "timestamp": "1781190007", "to_ids": true, "type": "domain", "uuid": "ba0540e4-2f73-4400-b290-c7bd970f063a", "value": "macos-claude.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T17:00:02+00:00", "timestamp": "1781197202", "to_ids": false, "type": "url", "uuid": "f2cc6bc3-4bac-40de-b3e0-6077d0df78a3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ca12d94bcafb10d268d9c272559c2c507a583e6d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T17:00:02+00:00", "timestamp": "1781197202", "to_ids": false, "type": "url", "uuid": "65b380ab-7c21-45a3-a294-fe607074dd0b", "value": "https://x.com/moonlock_lab/status/2065098539424719235", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T17:00:02+00:00", "timestamp": "1781197203", "to_ids": false, "type": "url", "uuid": "6db434c9-f41c-47d9-9329-d561ea3a516f", "value": "https://www.virustotal.com/gui/file/b7d17e11406a15c3a407ecfcb4d4f982edc2e4e18f2c4c177afd6b0bbb27de31/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-06-11T17:00:03+00:00", "timestamp": "1781197203", "to_ids": true, "type": "ip-dst", "uuid": "82e15abe-62f9-42cd-9fc9-6dcbcdfc90dc", "value": "91.92.243.90", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }