{ "Event": { "analysis": "1", "date": "2026-05-16", "extends_uuid": "", "info": "Maltrail IOC for 2026-05-17", "publish_timestamp": "1779055204", "published": true, "threat_level_id": "2", "timestamp": "1779044406", "uuid": "6b353c07-62b4-4e43-8c4b-44bf0e52f2fe", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "donut", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:03+00:00", "timestamp": "1778972404", "to_ids": false, "type": "url", "uuid": "5b8f5593-cfee-4db7-b2f1-340010da0fed", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f0dea21e80d782a39eefec8faa9aa4cf4324d930", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "donut", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:04+00:00", "timestamp": "1778972405", "to_ids": false, "type": "url", "uuid": "b055d197-31fb-4f34-a264-361711b417da", "value": "https://www.virustotal.com/gui/file/ef146f97c8fbc10e9ad485dbbf2227fa5943f62243c7a703c3900efbe700f6d8/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "donut", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:05+00:00", "timestamp": "1778972405", "to_ids": true, "type": "domain", "uuid": "b3ca1b18-910e-421e-88f9-28e92a91fc38", "value": "kelemet.shop", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "donut", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:05+00:00", "timestamp": "1778972405", "to_ids": true, "type": "domain", "uuid": "ef07dffc-1d3e-4355-9a15-e7af3ade9633", "value": "rpcsecnoweb.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:05+00:00", "timestamp": "1778972405", "to_ids": false, "type": "url", "uuid": "f9c570d0-11dd-4d0f-9023-00a1afb885f7", "value": "https://api.github.com/repos/stamparm/maltrail/commits/75bb4db9c069c5e2d2a0a4de1c0545c0814c4021", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:05+00:00", "timestamp": "1778972405", "to_ids": true, "type": "domain", "uuid": "9a99296b-9898-491a-92d3-59592fa0ca99", "value": "synapseops.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:05+00:00", "timestamp": "1778972405", "to_ids": false, "type": "url", "uuid": "64e8e8f8-a31b-405a-8d1e-258225692da7", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d6227508c5499bc99bd61aea832764e8899872a2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972406", "to_ids": false, "type": "url", "uuid": "e96f39d3-67e0-4cbd-9661-ee9d0540cd4c", "value": "https://x.com/brkalbyrk7/status/2055749987678486685", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972406", "to_ids": false, "type": "url", "uuid": "7ccccd10-496b-4826-8727-b74f52e48e25", "value": "https://gist.github.com/brkalbyrk/c7989c3d00a85bcfe0f3feaf4bf39e53", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972406", "to_ids": true, "type": "domain", "uuid": "6eed3e48-05fe-4519-87e8-5d58995991e2", "value": "cloudsendhub.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972406", "to_ids": true, "type": "domain", "uuid": "4fd3aa3e-0cc1-440f-bf34-a312fd60ea04", "value": "fastlinkstorage.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972406", "to_ids": true, "type": "domain", "uuid": "dac8d418-27cf-4382-822c-dc608602d2fb", "value": "fileconnectdata.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972406", "to_ids": true, "type": "domain", "uuid": "94fde59d-1df0-4ee5-b9cf-6ad3f64572ed", "value": "filedropvault.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:06+00:00", "timestamp": "1778972407", "to_ids": true, "type": "domain", "uuid": "81c4c6d1-9da4-4c7f-8a8f-32f3133d08cd", "value": "filehubconnect.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:07+00:00", "timestamp": "1778972407", "to_ids": true, "type": "domain", "uuid": "15cdda24-c1ba-4ca4-b366-7ac9f0c570fa", "value": "filemarbleplanet.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:07+00:00", "timestamp": "1778972407", "to_ids": true, "type": "domain", "uuid": "155abb30-b7c4-4a79-bbd5-0c104c2117f6", "value": "filepixelstudio.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:07+00:00", "timestamp": "1778972407", "to_ids": true, "type": "domain", "uuid": "2262668e-8f8b-4680-8470-65b061d2248b", "value": "filesecurelink.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:07+00:00", "timestamp": "1778972407", "to_ids": true, "type": "domain", "uuid": "ae9f5d53-f3b3-4d2c-b231-b1c3cb0b75f4", "value": "filesyncarchive.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:07+00:00", "timestamp": "1778972407", "to_ids": true, "type": "domain", "uuid": "393edfe6-59d0-46fc-be77-f9396e25d02f", "value": "filetigerrocket.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:07+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "c4f1c11e-4e6c-4852-8675-3eb6351a4f65", "value": "macbitmint.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:08+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "74d55f80-7cbc-4492-b3fd-149028bd4a9c", "value": "macbitport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:08+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "f04d298e-04dc-4a6a-b039-e00e716df3e3", "value": "maccloudgrid.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:08+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "0a86e67f-c367-4453-b998-e2501a0fc1a3", "value": "maccloudloop.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:08+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "ad6378f1-a1aa-44cb-9c54-9a84d572b927", "value": "maccloudport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:08+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "f565bc1a-4ef5-4a85-a15e-db182977b8a6", "value": "maccodedock.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:08+00:00", "timestamp": "1778972408", "to_ids": true, "type": "domain", "uuid": "c454aba6-dbbc-4e5d-92d2-f76c36886bad", "value": "maccorelane.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972409", "to_ids": true, "type": "domain", "uuid": "eb867af1-9c0f-4b67-bf84-a42f2a9feb6e", "value": "macpulselane.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972409", "to_ids": true, "type": "domain", "uuid": "ab9492f6-5db8-4767-b68a-f637e3cb6141", "value": "macquantlane.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972409", "to_ids": true, "type": "domain", "uuid": "1a482b10-8d24-4979-a005-91417b1936fa", "value": "plombirsirni.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972409", "to_ids": true, "type": "domain", "uuid": "fa8efd97-43a8-4636-b1ed-fa0d38356237", "value": "pr-otokoiaiep.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972409", "to_ids": true, "type": "domain", "uuid": "f99ee420-c5e1-4342-848b-bc2344949e32", "value": "protokoiiaiepoiicja.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972409", "to_ids": true, "type": "domain", "uuid": "8dcf7e6e-f769-447f-952b-2628b2bd0beb", "value": "share2e32git.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:09+00:00", "timestamp": "1778972410", "to_ids": true, "type": "domain", "uuid": "bd540193-be41-481d-a408-c7c22195cd46", "value": "sharelinkdata.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:10+00:00", "timestamp": "1778972410", "to_ids": true, "type": "domain", "uuid": "f7b32723-823c-4589-9070-d7dc77f7c549", "value": "smartfilevault.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-16T23:00:10+00:00", "timestamp": "1778972410", "to_ids": true, "type": "domain", "uuid": "f001e21b-fb72-4877-a3fd-0ccfe20eb9f7", "value": "syncfolderhub.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:02+00:00", "timestamp": "1778976003", "to_ids": false, "type": "url", "uuid": "30e2abaf-3412-4ed8-a72d-828bc8df3e3d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/539bc996ac870ae74444463c1d89f597b8749089", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:03+00:00", "timestamp": "1778976004", "to_ids": true, "type": "domain", "uuid": "097e268f-26a1-407e-ab3d-97e3c7d73260", "value": "0g25r94p96.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:04+00:00", "timestamp": "1778976005", "to_ids": true, "type": "domain", "uuid": "4919b46c-d3fe-49cd-bea4-23ec826a3e88", "value": "40n0.uvtiwwmlrl.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:05+00:00", "timestamp": "1778976005", "to_ids": true, "type": "domain", "uuid": "9d115fac-c976-4eb6-ba2f-b37ca93e95be", "value": "4vkc4fdduf.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:05+00:00", "timestamp": "1778976006", "to_ids": true, "type": "domain", "uuid": "e6e24349-a125-4175-bcd9-6b93f1e1d4a4", "value": "5jeqr9bf89.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:06+00:00", "timestamp": "1778976006", "to_ids": true, "type": "domain", "uuid": "437253dd-fd42-49e7-b7e8-0acddcf40acd", "value": "acaiqb90ql.v6.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:07+00:00", "timestamp": "1778976007", "to_ids": true, "type": "domain", "uuid": "81cf87fb-145b-412f-8ff5-480536db7c8c", "value": "aji1dfsici.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:07+00:00", "timestamp": "1778976007", "to_ids": true, "type": "domain", "uuid": "bf0b3ccb-0d2e-46b2-8fc0-9aac6ef35843", "value": "bkkug0us2sj.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:07+00:00", "timestamp": "1778976008", "to_ids": true, "type": "domain", "uuid": "95e22c9f-9f54-42c2-ac4d-1668fc79ef6e", "value": "bux-nid.ips-go.gleeze.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:08+00:00", "timestamp": "1778976008", "to_ids": true, "type": "domain", "uuid": "82c92cce-cc18-4e68-936c-bb7caede3321", "value": "d0vtzpoxyw.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:08+00:00", "timestamp": "1778976009", "to_ids": true, "type": "domain", "uuid": "3fbfd644-098e-4ba7-8c6b-1d3cbb0ce22f", "value": "da9dz.kpq8p1t81e.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:09+00:00", "timestamp": "1778976010", "to_ids": true, "type": "domain", "uuid": "fa9b286f-d4b2-44db-a8d0-02957b19928c", "value": "docinfo.ndocline-st51s.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:10+00:00", "timestamp": "1778976010", "to_ids": true, "type": "domain", "uuid": "4260793b-6b97-43f4-aef3-cfe3e25378b5", "value": "g7slrbjt7j.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:10+00:00", "timestamp": "1778976010", "to_ids": true, "type": "domain", "uuid": "edc88b2a-79bc-4d85-a5e0-1bb7d066c8f0", "value": "host-nid.mywire.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:10+00:00", "timestamp": "1778976011", "to_ids": true, "type": "domain", "uuid": "6d466b6b-ce05-4db1-acd3-cb773cbddbc1", "value": "info.mois-go.bumbleshrimp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:11+00:00", "timestamp": "1778976011", "to_ids": true, "type": "domain", "uuid": "82372632-639e-4524-834d-558e4a40ca1d", "value": "info.naver-log.ddnsfree.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:11+00:00", "timestamp": "1778976011", "to_ids": true, "type": "domain", "uuid": "9b9090a2-88e2-46f9-b568-3ed78387a3bf", "value": "invoice-doc.camdvr.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:11+00:00", "timestamp": "1778976011", "to_ids": true, "type": "domain", "uuid": "5fd5935d-9b06-4145-89bf-4a13ee675c4e", "value": "ips-check.1cooldns.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:12+00:00", "timestamp": "1778976012", "to_ids": true, "type": "domain", "uuid": "404aba1c-c5c9-44d0-8d55-58cdddcf2f6e", "value": "ips-go.gleeze.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:12+00:00", "timestamp": "1778976012", "to_ids": true, "type": "domain", "uuid": "4e7a8f03-0e74-4235-b1f0-cd9571a3b837", "value": "ips-nav.abrdns.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:12+00:00", "timestamp": "1778976013", "to_ids": true, "type": "domain", "uuid": "f30404b4-2726-44f9-84f3-cb698b1c4a10", "value": "kpq8p1t81e.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T00:00:13+00:00", "timestamp": "1778976013", "to_ids": true, "type": "domain", "uuid": "906d6456-494d-4772-a9c8-9143d5fe673c", "value": "mois-go.bumbleshrimp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:07+00:00", "timestamp": "1778979607", "to_ids": true, "type": "domain", "uuid": "be990240-5052-4a57-868f-a4dbfa1268d0", "value": "mtf-nid.ips-go.gleeze.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:07+00:00", "timestamp": "1778979607", "to_ids": true, "type": "domain", "uuid": "c836d92a-8f05-4fc8-9bef-c508f5a1ef29", "value": "nauthlogin.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:07+00:00", "timestamp": "1778979608", "to_ids": true, "type": "domain", "uuid": "4fd7f097-22c0-4850-8235-b8e46267c6e5", "value": "nav-log.ips-check.1cooldns.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:08+00:00", "timestamp": "1778979608", "to_ids": true, "type": "domain", "uuid": "2bb076f7-7270-4c96-866c-9262f8b306fc", "value": "naver-log.ddnsfree.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:08+00:00", "timestamp": "1778979608", "to_ids": true, "type": "domain", "uuid": "149cd3ba-1aa4-4884-9730-7c0f6222807f", "value": "ndoc-void.kozow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:08+00:00", "timestamp": "1778979608", "to_ids": true, "type": "domain", "uuid": "539e6c92-63ff-4b1c-94f1-e41ebc8e0acf", "value": "ndocline-st51s.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:08+00:00", "timestamp": "1778979608", "to_ids": true, "type": "domain", "uuid": "7fa68605-ee48-4ecc-979a-c4bf5a879d6e", "value": "ndocnid.da9dz.kpq8p1t81e.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:08+00:00", "timestamp": "1778979608", "to_ids": true, "type": "domain", "uuid": "1ba20456-6a83-402d-b2b0-bae08c14893a", "value": "nid.nauthlogin.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:08+00:00", "timestamp": "1778979609", "to_ids": true, "type": "domain", "uuid": "a1a6b5db-f068-48d3-be12-8c56f4c19ea9", "value": "nidlog.40n0.uvtiwwmlrl.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:09+00:00", "timestamp": "1778979609", "to_ids": true, "type": "domain", "uuid": "a07ff7f8-fc73-4c45-b24d-5aeec65d457d", "value": "ninvoice.nisdn.1cooldns.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:09+00:00", "timestamp": "1778979609", "to_ids": true, "type": "domain", "uuid": "1abb26ef-3dc1-45c0-8b80-6738b501ba14", "value": "nisdn.1cooldns.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:09+00:00", "timestamp": "1778979609", "to_ids": true, "type": "domain", "uuid": "0d7bb8e7-e4f3-4a89-8ead-91137089bd09", "value": "ntt-suggest.host-nid.mywire.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:09+00:00", "timestamp": "1778979609", "to_ids": true, "type": "domain", "uuid": "0c7b427d-219b-4295-83e9-2ef78f87f968", "value": "ntt-suggest.river-connect.ddnsguru.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:09+00:00", "timestamp": "1778979609", "to_ids": true, "type": "domain", "uuid": "116cd696-5c69-4fa7-855d-8aa55256310b", "value": "pc3vq8gte2.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:10+00:00", "timestamp": "1778979610", "to_ids": true, "type": "domain", "uuid": "bdf3e1f5-7d81-43ba-860c-fad5e4a67eeb", "value": "pzyyckwlqm.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:10+00:00", "timestamp": "1778979610", "to_ids": true, "type": "domain", "uuid": "c72c5a71-17e4-47cf-aa5b-437801f150e4", "value": "qlrkm553jk.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:10+00:00", "timestamp": "1778979610", "to_ids": true, "type": "domain", "uuid": "a4fcf609-cc8b-41e4-ab7b-2253c4bbe911", "value": "r8mcc7z7jb.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:10+00:00", "timestamp": "1778979610", "to_ids": true, "type": "domain", "uuid": "b3f8d022-2067-49e7-9a4b-43e5ba2e402e", "value": "redirect.abrdns.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:10+00:00", "timestamp": "1778979610", "to_ids": true, "type": "domain", "uuid": "eb15ae1d-1ff5-4613-98f8-fa7d8e2aabfc", "value": "river-connect.ddnsguru.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:14+00:00", "timestamp": "1778979614", "to_ids": true, "type": "domain", "uuid": "f7975d5f-0414-4c34-bbc0-a8e8d87b17ff", "value": "tdoc.cloud-ip.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:14+00:00", "timestamp": "1778979614", "to_ids": true, "type": "domain", "uuid": "af44d773-ff3c-41de-982c-4e569b7f1914", "value": "uvtiwwmlrl.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:14+00:00", "timestamp": "1778979614", "to_ids": true, "type": "domain", "uuid": "61cb398e-8fad-4e88-8e19-01b0b49685df", "value": "v3i2rde2y5.v6.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:14+00:00", "timestamp": "1778979615", "to_ids": true, "type": "domain", "uuid": "c0872cc6-15f0-4098-ade4-e94ab2460522", "value": "wgjngrxokv.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:15+00:00", "timestamp": "1778979615", "to_ids": true, "type": "domain", "uuid": "05e6ee9b-bf29-4eb4-b629-5cc4d34833f2", "value": "x1prl5k1a2.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:15+00:00", "timestamp": "1778979615", "to_ids": true, "type": "domain", "uuid": "dfc90497-7bca-49e2-b59a-0dc888ee33fd", "value": "x94z3llzz6d.v6.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:15+00:00", "timestamp": "1778979615", "to_ids": true, "type": "domain", "uuid": "9df765c6-57ac-47d1-b362-ad8c1cc288c2", "value": "ya7taxdm520.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T01:00:15+00:00", "timestamp": "1778979615", "to_ids": true, "type": "domain", "uuid": "f9aaf6fb-f93b-4314-800f-cfa290b9e178", "value": "z330woigb3.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:05+00:00", "timestamp": "1779019205", "to_ids": false, "type": "url", "uuid": "a26b4bc0-e4a1-4ced-ba60-0e2f0439f4ab", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0942591c7d5d50a60f3ea92611e38f166e54105b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:06+00:00", "timestamp": "1779019206", "to_ids": false, "type": "url", "uuid": "8af8d089-c526-47ab-a38a-b5a0f67b9948", "value": "https://x.com/smica83/status/2055759040647495787", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:06+00:00", "timestamp": "1779019206", "to_ids": false, "type": "url", "uuid": "c8444cb5-09af-454f-996d-49b699bb361d", "value": "https://www.virustotal.com/gui/file/efbbb83671301fa9e1fec081e4d943d8d180fa4e243ca16ba130099b2a158e88/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:06+00:00", "timestamp": "1779019206", "to_ids": false, "type": "url", "uuid": "089e3c9d-d05e-4abe-b3ec-0a6eea399d6f", "value": "https://www.virustotal.com/gui/file/ff69ca82c7e5d771b5da642b483683e852ed4d6facfc5c593e089480dc395a37/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:07+00:00", "timestamp": "1779019207", "to_ids": true, "type": "domain", "uuid": "7cf9e9b9-7665-4ce7-b3cf-f10791bc4334", "value": "photobook-reserv.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:07+00:00", "timestamp": "1779019207", "to_ids": false, "type": "url", "uuid": "74d3bbb5-3c55-4673-81f6-3e5682d04982", "value": "https://api.github.com/repos/stamparm/maltrail/commits/2f8cdfa5ce1e261e7dc4d361b656f2c08e331e86", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:07+00:00", "timestamp": "1779019207", "to_ids": true, "type": "domain", "uuid": "4b3cfcb2-c7ec-4552-bbd2-52192f18c10d", "value": "10.folklorea.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:07+00:00", "timestamp": "1779019207", "to_ids": true, "type": "domain", "uuid": "124c6c37-4548-4017-935c-6b6788033447", "value": "refreshwp.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:07+00:00", "timestamp": "1779019208", "to_ids": true, "type": "domain", "uuid": "7b35aac9-ad50-44b2-8b58-ff42540975ea", "value": "refreshwpws.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:08+00:00", "timestamp": "1779019208", "to_ids": true, "type": "domain", "uuid": "8af71239-75de-44fe-8b12-f4e76b368e40", "value": "refreshws.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:08+00:00", "timestamp": "1779019208", "to_ids": true, "type": "domain", "uuid": "fb96ff2c-6207-4a5a-a91e-80e5cd1daa1d", "value": "refreshwss.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:08+00:00", "timestamp": "1779019208", "to_ids": true, "type": "domain", "uuid": "f4cb7ca3-1a57-475d-abaf-c1eb5415c331", "value": "wpwsconnect.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:08+00:00", "timestamp": "1779019208", "to_ids": true, "type": "domain", "uuid": "438d4e11-67a4-4ce4-9100-e5ef5d49bbfa", "value": "wss-cdn.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:08+00:00", "timestamp": "1779019208", "to_ids": false, "type": "url", "uuid": "dda154bd-526b-4042-9bf6-49460e41522f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/99fe77613fe75dd25ab06635f1b96a0b63751c52", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:08+00:00", "timestamp": "1779019209", "to_ids": true, "type": "domain", "uuid": "5cb7ad7f-c2fc-4c76-bd5b-e0344f083d04", "value": "asubne.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:09+00:00", "timestamp": "1779019209", "to_ids": true, "type": "domain", "uuid": "cbaf15e3-f9cc-4b50-98c6-13753c526ad4", "value": "iinemar.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:09+00:00", "timestamp": "1779019209", "to_ids": true, "type": "domain", "uuid": "04483207-5919-481d-b786-b49209a385c9", "value": "iomnan.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:09+00:00", "timestamp": "1779019209", "to_ids": true, "type": "domain", "uuid": "3479d65a-8349-4de9-be6a-708d18f55ba7", "value": "oimane.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:09+00:00", "timestamp": "1779019210", "to_ids": true, "type": "domain", "uuid": "23b34e66-efca-4f9c-8516-8e7fcac3dde4", "value": "qervbae.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:10+00:00", "timestamp": "1779019210", "to_ids": true, "type": "domain", "uuid": "0d80e400-c955-4059-9d29-c739c030f2a1", "value": "qevbae.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:10+00:00", "timestamp": "1779019210", "to_ids": true, "type": "domain", "uuid": "4343cfe1-1fce-41f3-b145-24a89edc81a9", "value": "xavcbb.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:10+00:00", "timestamp": "1779019210", "to_ids": true, "type": "domain", "uuid": "1716bdeb-cdcc-44cb-8a95-5fa4f71d0367", "value": "ytbna.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_fvncbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:10+00:00", "timestamp": "1779019210", "to_ids": true, "type": "domain", "uuid": "77a71294-7666-4a5f-b0d3-2f46a00f6996", "value": "zwthbae.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:10+00:00", "timestamp": "1779019210", "to_ids": false, "type": "url", "uuid": "3334b33c-f29d-4bb5-b95c-77fe192ed6c9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ef5f2a3c1fa04d426c8ef0f811172498d8bd6a33", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:10+00:00", "timestamp": "1779019211", "to_ids": true, "type": "domain", "uuid": "3ece1d9f-f540-4954-8050-240561ab8f36", "value": "correia.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:11+00:00", "timestamp": "1779019211", "to_ids": true, "type": "domain", "uuid": "1259dff3-0fb1-427d-9cb4-226f86a65910", "value": "roterts.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:11+00:00", "timestamp": "1779019211", "to_ids": false, "type": "url", "uuid": "2560e909-8b28-4907-8684-a8043a54abeb", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7ebbae992df17e6c24a22831db46f8646018568e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:11+00:00", "timestamp": "1779019211", "to_ids": false, "type": "url", "uuid": "74eadb97-7416-41d6-bd40-8973864e190c", "value": "https://www.virustotal.com/gui/file/8fffed6d1ce481d94a085b93ee5a553adb163c26c404548515b07b0a2392299c/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:11+00:00", "timestamp": "1779019211", "to_ids": true, "type": "ip-dst", "uuid": "76c7006c-f92b-4a5e-91cc-d25061c846e8", "value": "15.235.149.6", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:11+00:00", "timestamp": "1779019211", "to_ids": false, "type": "url", "uuid": "b49812a1-ee0b-4701-a306-c1f8bf50c7ef", "value": "https://api.github.com/repos/stamparm/maltrail/commits/6080cd76fc188313b793f085b1269006d0f540f8", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T12:00:12+00:00", "timestamp": "1779019212", "to_ids": true, "type": "domain", "uuid": "2ac30286-f82b-49ff-a1d6-9a4b7499af45", "value": "peper.help", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:05+00:00", "timestamp": "1779022805", "to_ids": false, "type": "url", "uuid": "b8573c64-82a1-4f24-b993-731897329466", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f49beb1b064ba7188886ccb72e903ea0a462aa33", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:05+00:00", "timestamp": "1779022805", "to_ids": true, "type": "domain", "uuid": "3ea5ecc8-2ccb-4a1d-bec9-fa10b357d475", "value": "ck44jili.win", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:05+00:00", "timestamp": "1779022805", "to_ids": false, "type": "url", "uuid": "2f5ddc33-fb68-4a9c-ad97-573f195e78e4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7ec08b63491e0f8e33bd79e09b0d71b6231e7d8b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022806", "to_ids": false, "type": "url", "uuid": "9ccdc441-2333-4d07-9cb7-5e4384b380a9", "value": "https://x.com/skocherhan/status/2055787911493112052", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022806", "to_ids": false, "type": "url", "uuid": "52dc6879-8dec-4f24-8e51-8e725cc02d7c", "value": "https://www.virustotal.com/gui/file/b5c640131a38aa6d40755b114fd53d15e2e23c38f01989c6804dbb660d71aa71/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022806", "to_ids": true, "type": "domain", "uuid": "fa55734c-1c25-4816-a921-f9a13cd0be36", "value": "ck44jili.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022806", "to_ids": false, "type": "url", "uuid": "7a3a3b6d-6631-492d-8e5b-59d1e3e97c47", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5980d587b95d199719aab44c031d49e4593d631d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022806", "to_ids": false, "type": "url", "uuid": "e1f2277f-7b9e-40cd-8fbc-5b8f5f353b29", "value": "https://x.com/smica83/status/2055761121554948408", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022806", "to_ids": true, "type": "ip-dst", "uuid": "8fee8899-ef9d-4f53-887b-1a36da000c3f", "value": "167.88.167.9", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "domain", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:06+00:00", "timestamp": "1779022807", "to_ids": false, "type": "url", "uuid": "73be1bd1-16c6-4fb6-b482-d78bef896110", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b733623f241cdbece9e36293e993a808b3f68200", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "domain", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022807", "to_ids": false, "type": "url", "uuid": "48f75e3a-835d-43be-9fbc-3437e947e53b", "value": "https://x.com/MosheTov/status/2055763192064725428", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "domain", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022807", "to_ids": false, "type": "url", "uuid": "d7ac5cfb-344b-4ce2-aa93-11767c9e2ab6", "value": "https://x.com/TekDefense/status/2055818318209020115", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "domain", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022807", "to_ids": false, "type": "url", "uuid": "fc89c9b9-a14b-4f6e-92b6-aa49b803b1a4", "value": "https://www.virustotal.com/gui/domain/lhr.life/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "domain", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022807", "to_ids": true, "type": "domain", "uuid": "40023585-eae2-415c-ba01-4a32c939284e", "value": "lhr.life", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "metasploit", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022807", "to_ids": false, "type": "url", "uuid": "46674375-b290-4fe2-96b8-1fe99cdc1ef9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/43595b78c51ccf4a0acca75d8aa1cba70f5db038", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "metasploit", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022807", "to_ids": false, "type": "url", "uuid": "98a5cb97-4928-46eb-8fe1-8064c72aad64", "value": "https://www.virustotal.com/gui/file/07a3f2e780ab150b6c97383d54fa7b66f037c846552a7ee6cc6543d679a1e75d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "metasploit", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:07+00:00", "timestamp": "1779022808", "to_ids": true, "type": "domain", "uuid": "9de91852-36a9-44cf-a35b-bfe546e40b5c", "value": "d8b498f1781bc2.lhr.life", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:08+00:00", "timestamp": "1779022808", "to_ids": false, "type": "url", "uuid": "8fe7203f-a48d-488f-849d-cc004612d8fb", "value": "https://api.github.com/repos/stamparm/maltrail/commits/91028f316bb10461d2a4a8c6079ffea3e14bc910", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:08+00:00", "timestamp": "1779022808", "to_ids": true, "type": "domain", "uuid": "e3be2fe0-f311-4c73-bc00-aaeed3b3070f", "value": "gobsaj.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:08+00:00", "timestamp": "1779022808", "to_ids": true, "type": "domain", "uuid": "66c43d8e-89d4-44c7-bb68-502cdfeaea46", "value": "cyberdriftmatrix1.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:08+00:00", "timestamp": "1779022808", "to_ids": true, "type": "domain", "uuid": "f0051980-766d-4afd-a2af-5f13b1106765", "value": "cyberdriftmatrix5.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:08+00:00", "timestamp": "1779022808", "to_ids": true, "type": "domain", "uuid": "acd8c314-0542-47e4-ae8c-74657da9a35d", "value": "cyberdriftmatrix9.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:08+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "ddb93296-7ee9-4966-97bf-e1e7f2175382", "value": "filequbic.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "eec211de-b082-4e2e-90f4-7f3ad0243e67", "value": "neuralcoreflux4.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "72f1fc45-4021-4d5d-b3d9-70bae36a628c", "value": "neuralcoreflux8.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "bdb7ccc5-c605-4abb-a942-346e4103d9a1", "value": "nexuswavecore1.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "911e171a-c040-447f-ba52-121804f1a9e8", "value": "nexuswavecore1.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "79646405-6eb0-4600-9f4f-3e7876a41d1c", "value": "nexuswavecore4.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022809", "to_ids": true, "type": "domain", "uuid": "834598fb-2003-4a0e-a02a-ba66b0ad8117", "value": "nexuswavecore9.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:09+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "9b647cf0-aea1-44b7-afb0-7f6977d0e798", "value": "nexuswavecore9.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:10+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "c9b224fe-e826-4511-96a0-645b1f1c1141", "value": "orbitmeshlink3.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:10+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "ffd620d6-37c9-4565-b463-83e4aab629d3", "value": "orbitmeshlink3.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:10+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "b7b495bb-0e22-40ac-8a8e-dd46281fb561", "value": "orbitmeshlink5.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:10+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "c6d2818f-d969-4136-af21-54c8c36538ea", "value": "stellarnodegrid1.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:10+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "82a34aaa-a3c5-4f26-8fde-ef247dbeab5c", "value": "uneifoifow-3ndfskq.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:10+00:00", "timestamp": "1779022810", "to_ids": true, "type": "domain", "uuid": "d019d416-db9c-4e09-bf63-1894b8fde17e", "value": "vectorquantforge6.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022811", "to_ids": false, "type": "url", "uuid": "801e8854-373d-40a1-b815-245f02a74c90", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b7ccb94f0f4c9e7fbd457dfb451bf8491bcda07f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022811", "to_ids": false, "type": "url", "uuid": "39da320b-e75f-4403-b1d4-8caea7b0fb90", "value": "https://x.com/skocherhan/status/2055709288539050134", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022811", "to_ids": false, "type": "url", "uuid": "e09b1c28-ef78-4fcc-9888-637ab30328f4", "value": "https://www.virustotal.com/gui/ip-address/118.194.249.36/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022811", "to_ids": true, "type": "domain", "uuid": "da8fca44-378b-4aa2-a3fc-29a10c4cadf6", "value": "gov.ydns.eu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022811", "to_ids": true, "type": "domain", "uuid": "fbe25b7e-3788-40c3-b460-55cedfa0e020", "value": "noreply.gov.ydns.eu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022811", "to_ids": false, "type": "url", "uuid": "49a00682-2914-4b26-a65b-a6b141a5ff58", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d94b65a6bb906890d48a72567ae4ddc9b983487a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:11+00:00", "timestamp": "1779022812", "to_ids": true, "type": "domain", "uuid": "9bd8d4a6-99e6-4b10-8414-23184e8eec0f", "value": "bookreservphoto.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:12+00:00", "timestamp": "1779022812", "to_ids": false, "type": "url", "uuid": "ca90baaf-b52f-4976-8cf4-0f7d6b155927", "value": "https://api.github.com/repos/stamparm/maltrail/commits/2f45d4060737c1fa31a459cda30a0c23d120ad99", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:12+00:00", "timestamp": "1779022812", "to_ids": false, "type": "url", "uuid": "143c78b4-5605-4edc-b709-8e3dab90cfec", "value": "https://x.com/smica83/status/2055763686812270963", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T13:00:12+00:00", "timestamp": "1779022812", "to_ids": true, "type": "domain", "uuid": "9be84d17-a945-41ec-a986-121a1b1a0a0a", "value": "hong-jon-demonstrate-very.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:05+00:00", "timestamp": "1779026405", "to_ids": false, "type": "url", "uuid": "d7a24cad-a92e-459e-84f1-6a2fbb0124ce", "value": "https://api.github.com/repos/stamparm/maltrail/commits/68d752329e933cc83caa907a1aa2341084269452", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:05+00:00", "timestamp": "1779026406", "to_ids": false, "type": "url", "uuid": "0467b88b-6d40-4425-8b40-4ab64a3abed1", "value": "https://www.virustotal.com/gui/ip-address/193.233.18.135/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:06+00:00", "timestamp": "1779026406", "to_ids": false, "type": "url", "uuid": "c7b3063f-1fc3-4578-90ed-351170160134", "value": "https://www.virustotal.com/gui/ip-address/213.165.61.226/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:06+00:00", "timestamp": "1779026406", "to_ids": false, "type": "url", "uuid": "2d36a5e4-38f1-4396-a7fc-91e70350f528", "value": "https://www.virustotal.com/gui/ip-address/78.153.149.182/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:06+00:00", "timestamp": "1779026406", "to_ids": false, "type": "url", "uuid": "79543203-412d-4062-91bc-11d70e8b63fa", "value": "https://www.virustotal.com/gui/ip-address/87.251.66.114/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:06+00:00", "timestamp": "1779026406", "to_ids": false, "type": "url", "uuid": "7cb56088-fc94-4876-805f-7e1c5e983020", "value": "https://www.virustotal.com/gui/file/938dac6227e47fed245ad25d289489d67e574882430652b5fb7b6368e262e873/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:07+00:00", "timestamp": "1779026407", "to_ids": true, "type": "domain", "uuid": "0a518d6e-9484-4f5f-bf75-1e9b316890c0", "value": "ntpcalc.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:07+00:00", "timestamp": "1779026407", "to_ids": true, "type": "domain", "uuid": "85192af1-19a4-4a87-ae05-b1becec5212e", "value": "ntpcorrect.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:07+00:00", "timestamp": "1779026407", "to_ids": true, "type": "domain", "uuid": "d29449ac-b1f3-464b-b41e-e0f52b775703", "value": "ntpedge.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:07+00:00", "timestamp": "1779026407", "to_ids": true, "type": "domain", "uuid": "af1f3358-3a9c-486f-b24f-f505f3fba501", "value": "packetsign.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:07+00:00", "timestamp": "1779026408", "to_ids": true, "type": "domain", "uuid": "58ed7f12-9032-4a24-8002-f8360c716c05", "value": "packettake.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:08+00:00", "timestamp": "1779026408", "to_ids": true, "type": "domain", "uuid": "e1a1fdd5-db1a-4d8b-8677-a92f2806c641", "value": "ssltail.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:08+00:00", "timestamp": "1779026408", "to_ids": true, "type": "domain", "uuid": "4697bd8e-cb27-4ec0-9044-afed992772ab", "value": "updatestop.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:08+00:00", "timestamp": "1779026408", "to_ids": false, "type": "url", "uuid": "d9b50ce0-dfd6-4e86-a8ad-46a19a65f373", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ba64860318413dded3ac7b0b23c04357ba6549e7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:08+00:00", "timestamp": "1779026408", "to_ids": false, "type": "url", "uuid": "ddcccd57-d86b-4f71-9096-b1b1216253a5", "value": "https://bi.zone/eng/expertise/blog/kamen-nozhnitsy-bumaga-novyy-instrumentariy-v-atakakh-klastera-paper-werewolf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:08+00:00", "timestamp": "1779026409", "to_ids": true, "type": "domain", "uuid": "d956ec93-77ee-4d51-a53f-0a5c6fcf787c", "value": "arrotech.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:09+00:00", "timestamp": "1779026409", "to_ids": true, "type": "domain", "uuid": "909c84b2-709f-4a18-93a3-697ebad5d50d", "value": "certcalc.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:09+00:00", "timestamp": "1779026409", "to_ids": true, "type": "domain", "uuid": "9f8c3075-90ea-4437-b4b9-8dd09a3af37f", "value": "ntpluck.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:09+00:00", "timestamp": "1779026409", "to_ids": true, "type": "domain", "uuid": "1684b541-2f1a-4307-9b69-f3c597a5158b", "value": "ntpsum.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:09+00:00", "timestamp": "1779026409", "to_ids": true, "type": "domain", "uuid": "a7e364c0-930a-4fff-941e-a307102b4f0e", "value": "ntptop.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:09+00:00", "timestamp": "1779026410", "to_ids": true, "type": "domain", "uuid": "c1c694dd-82be-42b4-9b69-050e4ecc5f65", "value": "ssltop.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:10+00:00", "timestamp": "1779026410", "to_ids": true, "type": "domain", "uuid": "91073182-2b65-410b-ac3d-942984aff188", "value": "woburneast.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:10+00:00", "timestamp": "1779026410", "to_ids": true, "type": "domain", "uuid": "2305ec61-8c23-4e1c-b505-8beb68f8b666", "value": "zeccecard.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_mirai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:10+00:00", "timestamp": "1779026410", "to_ids": false, "type": "url", "uuid": "2d03a298-5196-45eb-832c-4476ee55dc9a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/431c51edd3c4c975581449b5ac4c9caef98e0284", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_mirai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:10+00:00", "timestamp": "1779026410", "to_ids": true, "type": "ip-dst", "uuid": "4230de68-32da-4bfd-967f-481359cf9ba0", "value": "161.97.182.121", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:10+00:00", "timestamp": "1779026411", "to_ids": false, "type": "url", "uuid": "4fc7357e-d812-41f6-aad5-1bba4444caed", "value": "https://api.github.com/repos/stamparm/maltrail/commits/75b08a3a2b1742b54f70c8bc4e26b4d855cd3966", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:11+00:00", "timestamp": "1779026411", "to_ids": true, "type": "domain", "uuid": "796f3d98-f6d9-485a-82c9-35df4a3a352d", "value": "ahioq.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:11+00:00", "timestamp": "1779026411", "to_ids": false, "type": "url", "uuid": "61f92881-e31b-471e-a212-6bbfd6afe069", "value": "https://api.github.com/repos/stamparm/maltrail/commits/bbea0bf198d2fd87ca64f745f33f12a685c44422", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:11+00:00", "timestamp": "1779026411", "to_ids": false, "type": "url", "uuid": "33a37459-34f1-49a5-93d4-d153da83a546", "value": "https://oasis-security.io/blog/malaysian-government-with-undisclosed-c2-infrastructure", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:11+00:00", "timestamp": "1779026411", "to_ids": true, "type": "ip-dst", "uuid": "8d024e54-c8b9-4c49-a642-0fc5ca556c0b", "value": "20.17.161.118", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:12+00:00", "timestamp": "1779026413", "to_ids": false, "type": "url", "uuid": "1a446ff3-891c-4d79-a2a5-61af9d332e1a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e199ddfdb078eb151b9fd5638faee59dade36dae", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:13+00:00", "timestamp": "1779026413", "to_ids": true, "type": "domain", "uuid": "e3ffb64b-6561-4382-8e99-7f008a6fea18", "value": "bbc45e9f547785.lhr.life", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T14:00:13+00:00", "timestamp": "1779026413", "to_ids": true, "type": "domain", "uuid": "6af4f22b-aa22-40da-93b8-bfa47b9ebf0a", "value": "edcf8b03c84634.lhr.life", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:03+00:00", "timestamp": "1779030003", "to_ids": false, "type": "url", "uuid": "28255ad6-39a4-4bd8-a99a-bab58d0fac16", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e55e2870aacdea1983a3ec3afe2b39897272acf2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:03+00:00", "timestamp": "1779030003", "to_ids": false, "type": "url", "uuid": "a5de1363-18ec-42d0-b867-68f74497c1ee", "value": "https://www.virustotal.com/gui/file/30e47b1ae06d27bc1d2c6205070b822966a550ea62da21412754d6eff2d76e77/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:03+00:00", "timestamp": "1779030003", "to_ids": true, "type": "ip-dst", "uuid": "bbb11ea3-b442-44d0-84b1-2024caa50dba", "value": "216.122.187.185", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:03+00:00", "timestamp": "1779030003", "to_ids": false, "type": "url", "uuid": "6d2a6339-f076-47d1-9840-ca87e9a0ff51", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f4cdb04c802c73facae33ff2398d8735ee6fa180", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:03+00:00", "timestamp": "1779030004", "to_ids": false, "type": "url", "uuid": "634d8818-6e85-4043-9a3d-72ae2e9dc653", "value": "https://x.com/bsforvt727/status/2055928650227449906", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:04+00:00", "timestamp": "1779030004", "to_ids": false, "type": "url", "uuid": "d758646c-9c58-41b5-b0aa-b29265f7facc", "value": "https://www.virustotal.com/gui/file/1a54b382f98eacc2a299355315f691ebc23e7674b7e96209455d9060c48d710d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:04+00:00", "timestamp": "1779030004", "to_ids": false, "type": "url", "uuid": "967e5511-6d8e-4fcd-a01b-c2164495c866", "value": "https://www.virustotal.com/gui/file/c01a62e3776a82777cb3a075e3c4e3590b9e4d2ad6b4cda1d74626f3fd14f59b/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:04+00:00", "timestamp": "1779030004", "to_ids": false, "type": "url", "uuid": "d4e2747e-5c8c-4460-a727-3bb7d1bb458f", "value": "https://www.virustotal.com/gui/file/034477ef275615a3c80d89a40e9bc0827a81724fc8531c0bbef3cde484fc1445/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:04+00:00", "timestamp": "1779030004", "to_ids": true, "type": "ip-dst", "uuid": "5e185364-6b6f-4d6f-b221-1e0f24e353ac", "value": "130.12.242.88", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:04+00:00", "timestamp": "1779030005", "to_ids": true, "type": "domain", "uuid": "a54c1253-9986-41a1-bc6b-b4b0604b7304", "value": "chilloutsvrmod.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:05+00:00", "timestamp": "1779030005", "to_ids": true, "type": "domain", "uuid": "c5b64c3d-e807-4c78-9609-63e3a29438f5", "value": "flexrat.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:05+00:00", "timestamp": "1779030005", "to_ids": true, "type": "domain", "uuid": "2a3fa354-bf4c-4726-aed8-cae5b9d85e0c", "value": "l874ca.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "flexrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:05+00:00", "timestamp": "1779030005", "to_ids": true, "type": "domain", "uuid": "f4235318-a220-432b-87b1-4fd3cbaa2a01", "value": "panel.flexrat.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:05+00:00", "timestamp": "1779030005", "to_ids": false, "type": "url", "uuid": "5a330b75-5b40-4a82-b217-12543eea8d1c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b5615284edc14c2a9aa304bdf3e907d315f29b3e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:05+00:00", "timestamp": "1779030005", "to_ids": true, "type": "domain", "uuid": "e607a9c7-b983-4272-8e52-5c8b3a8b7f65", "value": "ntpadjust.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:05+00:00", "timestamp": "1779030005", "to_ids": true, "type": "domain", "uuid": "6d8238f7-193e-483d-bbe3-f50b8f9ac7a4", "value": "ntpbayhai.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030006", "to_ids": true, "type": "domain", "uuid": "2ad66439-ae21-4fd0-ae09-b5371055eb7e", "value": "ntpchck.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030006", "to_ids": true, "type": "domain", "uuid": "719d3fe4-8f91-4f8d-8a4f-7444267a4098", "value": "ntpcheck.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030006", "to_ids": true, "type": "domain", "uuid": "c8e3c82e-c2cd-458e-bf11-3a4d9e3c0139", "value": "ntpfetch.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030006", "to_ids": true, "type": "domain", "uuid": "d7329636-5447-46e7-b2e0-e07058c5c142", "value": "ntpfix.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030006", "to_ids": true, "type": "domain", "uuid": "3cfc3a34-bb76-4dca-9f69-140e31942079", "value": "ntpget.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030006", "to_ids": true, "type": "domain", "uuid": "b2bc5245-ae1b-46ab-b84d-e5fae80d309e", "value": "ntphaiba.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:06+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "eaffd6cc-e0ba-4967-8cc0-7c6d48fce59f", "value": "ntphaimot.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:07+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "8c9b76b2-b5e7-472d-a51e-1b370aa62551", "value": "ntphaisau.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:07+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "3a8294ed-0b68-412f-bdde-826ad242e836", "value": "ntpinform.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:07+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "467da1bc-b903-4f74-89a9-0bce9b543b28", "value": "ntpmatch.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:07+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "977b980d-3c3c-428e-b6fe-ceae874b9f27", "value": "ntpmuoitam.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:07+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "be8d4179-e96c-4029-bae8-d401fd90dbbd", "value": "ntpnet.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:07+00:00", "timestamp": "1779030007", "to_ids": true, "type": "domain", "uuid": "9c94d254-f32b-4d6f-9804-c1898d91fc5a", "value": "ntpquirks.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030008", "to_ids": true, "type": "domain", "uuid": "9abc1741-934b-4c20-8311-b97d738a9744", "value": "ntpsetup.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030008", "to_ids": true, "type": "domain", "uuid": "97c1946e-0958-43db-b1d0-a6616da27909", "value": "ntpsync.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030008", "to_ids": true, "type": "domain", "uuid": "dabbe924-f82d-4eea-8af0-e8bbe9f9142f", "value": "ntptake.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030008", "to_ids": true, "type": "domain", "uuid": "6963458c-2c8b-4773-83ac-c35ea215bf90", "value": "ntptrack.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030008", "to_ids": true, "type": "domain", "uuid": "16e854e1-b77c-43a1-8e19-fa83822518ab", "value": "ntpverify.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030008", "to_ids": true, "type": "domain", "uuid": "591c5e10-9b8e-41bc-a4a3-7ea138d43da7", "value": "ntpzone.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:08+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "3f9a7a14-b476-477b-a0de-43fee6c58966", "value": "packetflow.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:09+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "73b8dd39-1080-4858-8b58-d756159feccb", "value": "packethost.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:09+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "d8237935-4393-4743-b2d4-828b2a9c3ad8", "value": "packetlabs.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:09+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "f032e43d-c39d-45aa-9c49-483bd74789a0", "value": "packetread.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:09+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "51a32528-fddb-4814-bd3a-903a56d45a4c", "value": "packetuser.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:09+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "892a083f-bcd4-4dc1-9c9c-a35472583320", "value": "packetxhub.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:09+00:00", "timestamp": "1779030009", "to_ids": true, "type": "domain", "uuid": "a1c8b0fd-380e-46d8-aa32-17aed66624c7", "value": "sslchck.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030010", "to_ids": true, "type": "domain", "uuid": "dc913709-7cb1-4c91-91c9-bc4842e18dee", "value": "sslcom.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030010", "to_ids": true, "type": "domain", "uuid": "f2dc0bbf-541c-4138-a130-32efbbfebef4", "value": "sslfix.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030010", "to_ids": true, "type": "domain", "uuid": "356ae84b-fd1d-4d49-ba4c-34699f03d339", "value": "sslhttp.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030010", "to_ids": true, "type": "domain", "uuid": "860f0c8a-64f7-467d-a2d6-bd07902d4bfa", "value": "sslntp.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030010", "to_ids": true, "type": "domain", "uuid": "c709eed4-2105-4063-9bb4-49d80e57d1da", "value": "sslpack.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030010", "to_ids": true, "type": "domain", "uuid": "a4fa2079-845f-469e-a36f-ae069bb7bb09", "value": "sslpoll.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:10+00:00", "timestamp": "1779030011", "to_ids": true, "type": "domain", "uuid": "1438ce61-e098-4e43-8724-f0d03b71bea9", "value": "sslradio.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:11+00:00", "timestamp": "1779030011", "to_ids": true, "type": "domain", "uuid": "589786b2-3086-4e20-b1ae-1312b5f10553", "value": "sslreach.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:11+00:00", "timestamp": "1779030011", "to_ids": true, "type": "domain", "uuid": "14b1b222-72ac-4412-8e10-95cf7a666875", "value": "sslserve.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:11+00:00", "timestamp": "1779030011", "to_ids": true, "type": "domain", "uuid": "ff0c7f3a-e8d0-42b0-b518-54c822c06a76", "value": "sslsign.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:11+00:00", "timestamp": "1779030011", "to_ids": true, "type": "domain", "uuid": "e249224d-6bb3-40c7-a4e7-7cad12e5d6f7", "value": "sslstart.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:11+00:00", "timestamp": "1779030011", "to_ids": true, "type": "domain", "uuid": "2b6eabae-aa41-4ebb-a2e5-381084237f2a", "value": "sslsum.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:11+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "3bc4e53b-2c93-4a14-a17a-e8b0e4736e2b", "value": "sslteam.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:12+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "1b623fe1-4b84-4570-aac9-efc65f79aef9", "value": "ssltech.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:12+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "a935cb5a-2adf-43b1-a445-379b4ad2d76f", "value": "ssltick.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:12+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "377a86af-808e-44a0-9025-d301109b434d", "value": "ssltrade.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:12+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "26afe905-5aa6-42fc-9e94-de4041132131", "value": "ssltrick.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:12+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "a13861ea-c8d2-4fa2-96e3-ccb442df24d8", "value": "ssltun.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_paperwerewolf", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T15:00:12+00:00", "timestamp": "1779030012", "to_ids": true, "type": "domain", "uuid": "5f24a7be-8009-4be8-a32e-a80c1a2ab192", "value": "sslvalid.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:05+00:00", "timestamp": "1779033605", "to_ids": false, "type": "url", "uuid": "55db73be-e2de-4092-9c38-2816272e399e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8d683fd7c6657c081020332cdb1c2f4b6f4c8c60", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:05+00:00", "timestamp": "1779033605", "to_ids": false, "type": "url", "uuid": "607f14da-a2f0-495a-ae61-23e5cba95a2b", "value": "https://x.com/meow_mfer/status/1954866701897805865", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:05+00:00", "timestamp": "1779033606", "to_ids": true, "type": "domain", "uuid": "ffb47981-6de7-4d2d-882b-40ef32d5d44f", "value": "bitgesell.finance", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:06+00:00", "timestamp": "1779033606", "to_ids": false, "type": "url", "uuid": "7d75d12c-43d0-48e3-a5ac-d7cd4131f9d9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3e47f71f50f67f16f1b1c4fd2b429d15842c0770", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:06+00:00", "timestamp": "1779033606", "to_ids": false, "type": "url", "uuid": "1ac427df-d343-4527-89a7-86c5b3c4cc3e", "value": "https://x.com/meow_mfer/status/2055981353674654105", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:06+00:00", "timestamp": "1779033606", "to_ids": false, "type": "url", "uuid": "43646f45-81e3-41dc-967c-642c06d7d1d5", "value": "https://x.com/TekDefense/status/2056022823592702452", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:06+00:00", "timestamp": "1779033606", "to_ids": false, "type": "url", "uuid": "abef9286-467f-4ea2-8563-75d97406f8f8", "value": "https://sandyclaw.permiso.io/shared/9cC7Jc0sJawMbpikB3ONEehU5aoK91bFu65CtaRUwzU", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:06+00:00", "timestamp": "1779033606", "to_ids": false, "type": "url", "uuid": "8221b6b2-e873-48c7-9d7f-b6c136a2b9f8", "value": "https://www.virustotal.com/gui/file/e58864cc22cd8ec17ae35dd810455d604aadab7c3f145b6c53b3c261855a4bb1/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:07+00:00", "timestamp": "1779033607", "to_ids": true, "type": "domain", "uuid": "fa712513-3884-47de-b594-9b705077e48a", "value": "logs-bin.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T16:00:07+00:00", "timestamp": "1779033607", "to_ids": false, "type": "url", "uuid": "90a89228-743e-4239-bc00-46edbbf7a1ea", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e3d763bdafb24dc31194b555c2f9f74d001c02c8", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:03+00:00", "timestamp": "1779044403", "to_ids": false, "type": "url", "uuid": "60235470-a1a7-4fcf-aea8-16e17e220162", "value": "https://api.github.com/repos/stamparm/maltrail/commits/69342828b126cd8d8977ce6ad3fca4732d4605f5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:03+00:00", "timestamp": "1779044404", "to_ids": false, "type": "url", "uuid": "4400aa96-0945-4af1-9d77-88f83a026b01", "value": "https://x.com/volrant136/status/2056077509901574493", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:04+00:00", "timestamp": "1779044404", "to_ids": false, "type": "url", "uuid": "fe1809b8-4930-4da8-bc49-e21f2fc05ecb", "value": "https://www.virustotal.com/gui/file/3003f4084df2f5ef9cdd896abc099f0a3b84dafd05c8d405beb3b276d6348d5b/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:04+00:00", "timestamp": "1779044405", "to_ids": false, "type": "url", "uuid": "1a2ab9e3-6541-4052-a2db-2bc1541e67ee", "value": "https://www.virustotal.com/gui/file/a03677e263bad0c2ea6ae319c1b0b925b1f3a2f851ed24141d74a65abaf7e70c/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:05+00:00", "timestamp": "1779044405", "to_ids": true, "type": "domain", "uuid": "4fc23ddd-7fe8-4138-915e-9118646194b5", "value": "interior-gov-pk.direct880.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:05+00:00", "timestamp": "1779044405", "to_ids": true, "type": "domain", "uuid": "d36f6f87-8433-4c0c-a493-888ef18ea74e", "value": "moha-gov-np.direct880.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:05+00:00", "timestamp": "1779044405", "to_ids": false, "type": "url", "uuid": "8b273f18-7da4-46fb-ba54-f4a76049d212", "value": "https://api.github.com/repos/stamparm/maltrail/commits/737dbb2007a2b6cf01a6b90029306fb4a0357ce0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:05+00:00", "timestamp": "1779044405", "to_ids": false, "type": "url", "uuid": "b484e743-a01c-4c35-918e-a8e874e714f9", "value": "https://x.com/Fact_Finder03/status/2055860085273035195", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-17T19:00:05+00:00", "timestamp": "1779044406", "to_ids": true, "type": "domain", "uuid": "52251a8c-6fd8-4b96-94d0-67e1c3185c57", "value": "8d088cbf74a10f72.blahaj.cam", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }