{ "Event": { "analysis": "1", "date": "2026-07-23", "extends_uuid": "", "info": "Maltrail IOC for 2026-07-24", "publish_timestamp": "1784930412", "published": true, "threat_level_id": "2", "timestamp": "1784930411", "uuid": "7151fa00-6906-4647-9cb0-ccc84b29f277", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:05+00:00", "timestamp": "1784883606", "to_ids": false, "type": "url", "uuid": "6bbe0061-b74d-4198-a0a5-7bfa5545eb44", "value": "https://api.github.com/repos/stamparm/maltrail/commits/accf0cc04c3894df22c2524ec7d65b8740e305e1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:06+00:00", "timestamp": "1784883606", "to_ids": true, "type": "domain", "uuid": "64164c82-032e-4d47-95aa-f5ad08623cb3", "value": "vitrinedasabedoria.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:06+00:00", "timestamp": "1784883606", "to_ids": false, "type": "url", "uuid": "4e53df12-718a-4182-9c64-a38df5e0b2b3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0640e815ac1915043e9b9c803b8cb09c4d5140cf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:06+00:00", "timestamp": "1784883606", "to_ids": true, "type": "domain", "uuid": "bf47f636-affa-4084-adae-0537cc067115", "value": "monitorondomainlintgt.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:06+00:00", "timestamp": "1784883606", "to_ids": true, "type": "domain", "uuid": "49a88d1a-7f7c-45df-9278-c91d51b0906a", "value": "8a.monitorondomainlintgt.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:06+00:00", "timestamp": "1784883607", "to_ids": true, "type": "domain", "uuid": "382d0cfd-9860-424d-9253-daf371a02481", "value": "9z.monitorondomainwintgt2.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:07+00:00", "timestamp": "1784883607", "to_ids": false, "type": "url", "uuid": "e2d0b7af-d709-4afb-b213-7460cdb825e9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d5f8b9ab003e2debc2f3fea0ea96c3e42ef62db0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:07+00:00", "timestamp": "1784883607", "to_ids": false, "type": "url", "uuid": "a807ab9d-4b7d-458e-9ff1-6cc0c9e9e579", "value": "https://x.com/goldenjackel12/status/2080527848432148692", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:07+00:00", "timestamp": "1784883607", "to_ids": false, "type": "url", "uuid": "4c94f355-5995-4e90-8d99-f26efcbb62be", "value": "https://www.virustotal.com/gui/file/67bbed4c71f93013910a8443fd92f4feb025ea44e7eba47e2f7afe84e3e8e830/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:07+00:00", "timestamp": "1784883607", "to_ids": true, "type": "ip-dst", "uuid": "26715df3-e446-4598-84d2-0620260c115d", "value": "173.225.99.250", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:07+00:00", "timestamp": "1784883607", "to_ids": true, "type": "domain", "uuid": "bd2661cd-f7da-456a-ad27-a1ca7ed37c38", "value": "monitorondomainwintgt.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_transparenttribe", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:07+00:00", "timestamp": "1784883608", "to_ids": true, "type": "domain", "uuid": "c3251335-97d2-4796-98d5-6fe29fbe0052", "value": "monitorondomainwintgt2.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:08+00:00", "timestamp": "1784883608", "to_ids": false, "type": "url", "uuid": "a82f5557-88e3-4782-b5da-23f81e17ea34", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e1bb3cf9f1aa6813529672951178c00345158164", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:08+00:00", "timestamp": "1784883608", "to_ids": true, "type": "domain", "uuid": "6ff69c3a-1412-4d4a-a1ec-3e398845214f", "value": "accescportcent.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:08+00:00", "timestamp": "1784883608", "to_ids": true, "type": "domain", "uuid": "8ae5ca8c-d643-439c-879a-e1c5c502b996", "value": "adbeinstallergeneral.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:08+00:00", "timestamp": "1784883608", "to_ids": true, "type": "domain", "uuid": "b3b34362-e9d3-42ef-9805-ec328beede2d", "value": "admln.mgmnt-consoletab.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:08+00:00", "timestamp": "1784883608", "to_ids": true, "type": "domain", "uuid": "f7994480-ccce-4390-a1dc-e09388d1be43", "value": "badoher-hotelrewiews.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:08+00:00", "timestamp": "1784883608", "to_ids": true, "type": "domain", "uuid": "74c9c03d-364c-449d-8b0c-22962c956864", "value": "badotherhstays.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883609", "to_ids": true, "type": "domain", "uuid": "77aab06e-6cb5-4020-b16b-4fda56d38422", "value": "bad-travelrewiese.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883609", "to_ids": true, "type": "domain", "uuid": "8b41fd49-811d-47b4-86ce-489beabb6440", "value": "bad-travelsreweies.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883609", "to_ids": true, "type": "domain", "uuid": "88cb1aaf-a836-4091-afd3-8b3b440ec1d8", "value": "dispute-resolution.support", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883609", "to_ids": true, "type": "domain", "uuid": "a53d0989-3808-432a-abe6-21d86dff4785", "value": "dispute-resolutioncenter.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883609", "to_ids": true, "type": "domain", "uuid": "5063867c-5a94-44d9-b1d4-234cb4faf431", "value": "dossiiggnn.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883609", "to_ids": true, "type": "domain", "uuid": "38cd14bb-0983-43ce-a7d0-156e07a9ae76", "value": "formulier-herkenning-2026.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:09+00:00", "timestamp": "1784883610", "to_ids": true, "type": "domain", "uuid": "a2dd2326-24ee-4780-92c5-14fb2fcc7b03", "value": "freedommobile5g-payments.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:10+00:00", "timestamp": "1784883610", "to_ids": true, "type": "domain", "uuid": "4cfd7bc0-b663-464e-8120-fa6039269fbc", "value": "hali-secure.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:10+00:00", "timestamp": "1784883610", "to_ids": true, "type": "domain", "uuid": "228b5f31-6c10-4b00-83ef-43cc6c8396df", "value": "hotel-guestbadrewies.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:10+00:00", "timestamp": "1784883610", "to_ids": true, "type": "domain", "uuid": "155b60a3-6ca4-4274-8ad9-554b0d838592", "value": "lloyd-secure.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:10+00:00", "timestamp": "1784883610", "to_ids": true, "type": "domain", "uuid": "04b9932c-1cd4-4a49-b17b-03e2def5945a", "value": "mgmntconsole-page.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:10+00:00", "timestamp": "1784883610", "to_ids": true, "type": "domain", "uuid": "8c040a24-a893-49cf-a8fb-8a3de3ff0bc3", "value": "myaccount-servicesonline.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:10+00:00", "timestamp": "1784883611", "to_ids": true, "type": "domain", "uuid": "d15856e5-d087-46cd-98d9-2c551c79bea5", "value": "portal-bzst-de.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:11+00:00", "timestamp": "1784883611", "to_ids": true, "type": "domain", "uuid": "7cd45002-2818-4919-b436-d00d0c023bc7", "value": "qbo-suppot-center.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:11+00:00", "timestamp": "1784883611", "to_ids": true, "type": "domain", "uuid": "46ee2243-b454-45d2-9e13-3199d8e4ee8e", "value": "qrs-knab.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:11+00:00", "timestamp": "1784883611", "to_ids": true, "type": "domain", "uuid": "e59d3679-c355-4192-907d-42eace28d074", "value": "resolution-center-dispute-review.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:11+00:00", "timestamp": "1784883611", "to_ids": true, "type": "domain", "uuid": "e0ee5bdb-0c67-4151-a24b-7ae54f37b803", "value": "secure-insurance2.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:11+00:00", "timestamp": "1784883611", "to_ids": true, "type": "domain", "uuid": "f5d6c7a9-d1e7-48c5-89ae-d6ad92d08f52", "value": "standardiomlivechat.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:11+00:00", "timestamp": "1784883612", "to_ids": false, "type": "url", "uuid": "05956e9a-f28c-4a2e-a9fd-219987fb7a58", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8ee2efe4bcfe64bb5b6a4aea6c91e31ff8781071", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:12+00:00", "timestamp": "1784883612", "to_ids": true, "type": "domain", "uuid": "101e9682-0b4c-4260-9aca-9d11878cd402", "value": "talkhome.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:12+00:00", "timestamp": "1784883612", "to_ids": false, "type": "url", "uuid": "5ff0abae-0a98-4e14-a43f-9cfd0f190e7a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/4a97bc5dcf506c51373bf1d5877b099ab64065f5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:12+00:00", "timestamp": "1784883612", "to_ids": true, "type": "domain", "uuid": "0953e7b8-65f7-46a3-84d7-16acea7e53bb", "value": "file-download.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:12+00:00", "timestamp": "1784883612", "to_ids": true, "type": "domain", "uuid": "d6f13a29-5aee-490f-a249-ec5831f726ee", "value": "frogssilk.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:12+00:00", "timestamp": "1784883612", "to_ids": true, "type": "domain", "uuid": "83603f87-f0ca-4d0b-922e-0a6960796476", "value": "ministergiants.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:12+00:00", "timestamp": "1784883613", "to_ids": true, "type": "domain", "uuid": "d50f1423-c4ec-41a4-b328-7a10621ef428", "value": "shoesyarn.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:13+00:00", "timestamp": "1784883613", "to_ids": true, "type": "domain", "uuid": "a46f122c-044e-4068-8163-b6e8996c233b", "value": "squirrelsecretary.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:13+00:00", "timestamp": "1784883613", "to_ids": false, "type": "url", "uuid": "43599b47-bc92-481f-8ea2-32383ff2888b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/99d68342dcc8ca4974294846f4adadb1b28e9544", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:13+00:00", "timestamp": "1784883613", "to_ids": true, "type": "domain", "uuid": "737e792e-c8a1-4aaf-96e9-302697039f7f", "value": "aeshire.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T09:00:13+00:00", "timestamp": "1784883613", "to_ids": true, "type": "domain", "uuid": "1190fb38-a52f-4e6b-8c0d-c27df465dde7", "value": "barringer.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "chaos_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T10:00:03+00:00", "timestamp": "1784887204", "to_ids": false, "type": "url", "uuid": "73978eb8-0f3f-45b4-a3e3-1208727b100d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/bdfb8db1b4f474acf51fc458ae8e75a794169acf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "chaos_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T10:00:04+00:00", "timestamp": "1784887204", "to_ids": false, "type": "url", "uuid": "15c2bef2-583f-4eb9-b0e1-9f5629e823b2", "value": "https://blog.talosintelligence.com/chaos-msarat-living-off-the-browser-to-build-covert-c2-channel", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "chaos_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T10:00:04+00:00", "timestamp": "1784887205", "to_ids": false, "type": "url", "uuid": "b700827b-189f-470b-8cb5-542bdd7e8b82", "value": "https://github.com/Cisco-Talos/IOCs/blob/main/2026/07/chaos-msarat.txt", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "chaos_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T10:00:05+00:00", "timestamp": "1784887205", "to_ids": true, "type": "ip-dst", "uuid": "da258afa-b256-416d-9fd7-c2fa2ea0183a", "value": "172.86.126.18", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "chaos_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T10:00:05+00:00", "timestamp": "1784887205", "to_ids": true, "type": "domain", "uuid": "fbe2d028-60a5-4e06-aa22-ec26eac3493d", "value": "ols-img-12.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "chaos_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T10:00:06+00:00", "timestamp": "1784887206", "to_ids": true, "type": "domain", "uuid": "747d96b1-12f9-497c-875c-e681b2ecee77", "value": "is-01-ast.ols-img-12.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:04+00:00", "timestamp": "1784890804", "to_ids": false, "type": "url", "uuid": "86bc0476-4037-4575-90ed-6d32e70ce8b0", "value": "https://api.github.com/repos/stamparm/maltrail/commits/beb88539f012038c512a195dc583b15465a95b8e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:05+00:00", "timestamp": "1784890805", "to_ids": true, "type": "domain", "uuid": "e6a86106-610e-4baf-a618-e098e900c81b", "value": "share-ya.shop", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:05+00:00", "timestamp": "1784890805", "to_ids": true, "type": "domain", "uuid": "533599be-9313-44ff-9487-2df71257b9a2", "value": "share-ya.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:05+00:00", "timestamp": "1784890805", "to_ids": false, "type": "url", "uuid": "137ac179-1d0a-4494-a8c4-94b7256905d0", "value": "https://api.github.com/repos/stamparm/maltrail/commits/41850713a3c595f5282db2a2af7f75452bee45c9", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:05+00:00", "timestamp": "1784890805", "to_ids": true, "type": "domain", "uuid": "2ba862da-e4fa-402b-a04b-0fed9a5683aa", "value": "vertextrust-advisor.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:05+00:00", "timestamp": "1784890805", "to_ids": true, "type": "domain", "uuid": "888891cf-12f3-4dc3-ba04-1c96fa514d7f", "value": "vertextrustadvisors.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:06+00:00", "timestamp": "1784890806", "to_ids": false, "type": "url", "uuid": "3a5f10eb-fc36-4c81-8ba8-162ed7ddbb7f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/37a375cadfa9e38bb99f96189b7351c648a644ae", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:06+00:00", "timestamp": "1784890806", "to_ids": false, "type": "url", "uuid": "d5c1bfc5-2d45-4902-91fd-e08b513b1cfb", "value": "https://www.group-ib.com/blog/jadeprox-china-nexus-triback-loader", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:06+00:00", "timestamp": "1784890806", "to_ids": true, "type": "ip-dst", "uuid": "706b0399-f7df-4632-8d8e-9951d6af80a9", "value": "8.217.190.58", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:06+00:00", "timestamp": "1784890806", "to_ids": true, "type": "ip-dst", "uuid": "fb249b60-bb7f-4827-985c-a07264269572", "value": "43.106.71.28", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:06+00:00", "timestamp": "1784890806", "to_ids": true, "type": "domain", "uuid": "5a773210-a8a5-4bf4-bebb-350f9806fab3", "value": "claude-pro.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:06+00:00", "timestamp": "1784890807", "to_ids": true, "type": "domain", "uuid": "116a7afe-b59b-474e-a0b3-71d7a9835ae3", "value": "dlrz-web.oss-cn-beijing.aliyuncs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:07+00:00", "timestamp": "1784890807", "to_ids": true, "type": "domain", "uuid": "0382e42e-4420-40db-a9d5-3075bbffb0ec", "value": "gouvvbo.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:07+00:00", "timestamp": "1784890807", "to_ids": true, "type": "domain", "uuid": "d8b19674-cc2d-4f0d-96c7-5af1ca428a3c", "value": "license.claude-pro.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:07+00:00", "timestamp": "1784890807", "to_ids": true, "type": "domain", "uuid": "450e3fa4-b31c-4894-82d3-74800dd2f415", "value": "update-crowdstrike.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:07+00:00", "timestamp": "1784890807", "to_ids": true, "type": "domain", "uuid": "84ff1e67-dcbf-4644-b99b-8ca7a88cee33", "value": "update-sentinelone.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:07+00:00", "timestamp": "1784890807", "to_ids": true, "type": "domain", "uuid": "caeeea51-7b7b-4e40-9698-ff80c8e4c8c9", "value": "update-trellix.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "adaptix_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:07+00:00", "timestamp": "1784890808", "to_ids": true, "type": "domain", "uuid": "daa70677-3026-4e09-9917-8f201597be0a", "value": "vertextrust-advisors.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890808", "to_ids": false, "type": "url", "uuid": "2479a4b4-14ca-4df3-8d75-b504caee41dc", "value": "https://api.github.com/repos/stamparm/maltrail/commits/06d838b8b96c095ee1ddc6de3e3a7f02936fb734", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890808", "to_ids": false, "type": "url", "uuid": "8a9908a1-cc10-4065-84f0-dec5c93e0028", "value": "https://www.proofpoint.com/us/blog/threat-insight/ta458-roundpress-exploits", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890808", "to_ids": true, "type": "domain", "uuid": "89b690e6-ccb7-432e-8497-129ee4a4bb02", "value": "hgmydr.wiki", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890808", "to_ids": true, "type": "domain", "uuid": "802ec053-2de4-4628-92f5-4d01dbe4c99a", "value": "share-ya.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890808", "to_ids": true, "type": "domain", "uuid": "434d59e0-630e-4dad-969f-10746da54ebd", "value": "upgybj.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890808", "to_ids": true, "type": "domain", "uuid": "4cd6f0b2-ff2e-41b6-ab79-2c086fbf4941", "value": "xsza.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:08+00:00", "timestamp": "1784890809", "to_ids": true, "type": "domain", "uuid": "f944480e-2a5f-4a36-a4a4-4e61d64c1faf", "value": "xwe.us", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "spypress", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T11:00:09+00:00", "timestamp": "1784890809", "to_ids": true, "type": "domain", "uuid": "fd29d012-8cbc-443e-b493-966bf93d92f3", "value": "zxzaq.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "nspire_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T12:00:03+00:00", "timestamp": "1784894403", "to_ids": false, "type": "url", "uuid": "3296445c-ec37-437a-a8a8-e98f2ed11817", "value": "https://api.github.com/repos/stamparm/maltrail/commits/719823a3cc9278d445f043b3f8147f098e3df0dc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "nspire_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T12:00:03+00:00", "timestamp": "1784894404", "to_ids": false, "type": "url", "uuid": "e233ca36-ca4a-4a88-91b3-81699698a2b1", "value": "https://x.com/DarkJstr/status/2080308644625965331", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "nspire_ransomware", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T12:00:04+00:00", "timestamp": "1784894404", "to_ids": true, "type": "domain", "uuid": "3902424c-8f10-49fb-b573-d1387470a268", "value": "nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:05+00:00", "timestamp": "1784898006", "to_ids": false, "type": "url", "uuid": "d1b4cb1b-376d-43fa-a05b-d4cb6070b755", "value": "https://api.github.com/repos/stamparm/maltrail/commits/6769e407bbd0c5df1dc9231e56a6a6192cb4df73", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:06+00:00", "timestamp": "1784898006", "to_ids": false, "type": "url", "uuid": "e16d9cbb-ebe2-40b8-baab-3d210746a612", "value": "https://x.com/smica83/status/2080258605907874020", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:06+00:00", "timestamp": "1784898006", "to_ids": false, "type": "url", "uuid": "9b5bef85-a268-44a4-9953-188a0a809c3d", "value": "https://tria.ge/260723-nw4mxaaj9z/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:06+00:00", "timestamp": "1784898006", "to_ids": true, "type": "ip-dst", "uuid": "5d8ba8ff-0172-4966-b14f-4e51c0a34567", "value": "155.103.71.115", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:06+00:00", "timestamp": "1784898007", "to_ids": false, "type": "url", "uuid": "0a3cb028-bdcf-4429-b83b-5b55217a74d7", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d30f5137f2fc4b2084c60fda5f1367e908df9a9c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:07+00:00", "timestamp": "1784898007", "to_ids": false, "type": "url", "uuid": "d5d22eb5-362d-40ac-99dd-bd5fcd6bae08", "value": "https://www.virustotal.com/gui/ip-address/185.39.207.39/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:07+00:00", "timestamp": "1784898007", "to_ids": true, "type": "domain", "uuid": "d67c408b-a7a5-4b90-94a4-13bb8acfcbd3", "value": "upsinf.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:07+00:00", "timestamp": "1784898007", "to_ids": false, "type": "url", "uuid": "b814dea6-b970-43d6-b585-c400e7107876", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c342a8a5af2d92f287c724efbca6b726013da8d0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:07+00:00", "timestamp": "1784898007", "to_ids": false, "type": "url", "uuid": "f907f487-c218-4ec1-ad32-794f38f55daf", "value": "https://blog.defentive.com/the-phantom-threat-inside-unc5518s-invisible-empire-of-metastealer-operations-defentive-3c05359dcae0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:07+00:00", "timestamp": "1784898007", "to_ids": false, "type": "url", "uuid": "e069ede5-8e72-42a7-80eb-9a6837f5e8e1", "value": "https://www.virustotal.com/gui/file/a09335aa9ea1a030ac39f1f39ee0dc0a916b1feddb45a677d241b2cc8f70bf01/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:07+00:00", "timestamp": "1784898008", "to_ids": true, "type": "domain", "uuid": "f74e25c8-2a0c-4d79-b627-8ac9d52da07d", "value": "info-ups.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:08+00:00", "timestamp": "1784898008", "to_ids": false, "type": "url", "uuid": "6aaf3516-b503-453e-84e2-bb815653a87e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3ebfbde281f03138145d9059abdf5a31c57e5fad", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:08+00:00", "timestamp": "1784898008", "to_ids": true, "type": "domain", "uuid": "280331b9-8188-410d-8dd8-71883c7fc54c", "value": "avida-nettbank-mycards.uabbros.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:08+00:00", "timestamp": "1784898008", "to_ids": true, "type": "domain", "uuid": "8a70a354-72f6-4c43-a743-ac3f9e2e0388", "value": "lloydkhan.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T13:00:08+00:00", "timestamp": "1784898008", "to_ids": true, "type": "domain", "uuid": "76ac0824-f9e1-4f5d-b576-fe9e553a76c3", "value": "nettbank-avida.lloydkhan.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T20:00:02+00:00", "timestamp": "1784923202", "to_ids": false, "type": "url", "uuid": "211fa9cc-9145-4cb1-be9e-3d3c3ae42364", "value": "https://api.github.com/repos/stamparm/maltrail/commits/45f399de3b67ee86fd65d0d2e169b131746e0a7f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T20:00:02+00:00", "timestamp": "1784923203", "to_ids": false, "type": "url", "uuid": "90e30e22-da79-4c7c-aa8a-fdcd19199e50", "value": "https://x.com/volrant136/status/2080669471878819889", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_sidewinder", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T20:00:03+00:00", "timestamp": "1784923203", "to_ids": true, "type": "domain", "uuid": "e4d3192b-4f38-428f-90db-c040aa779030", "value": "mail-fisheries-gov-bd.netlify.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:03+00:00", "timestamp": "1784926804", "to_ids": false, "type": "url", "uuid": "14e047ff-4abc-4572-bdcd-86a89926c8b1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7d4e236cea52c6946b3eee702043666cfa37cc3f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:04+00:00", "timestamp": "1784926805", "to_ids": false, "type": "url", "uuid": "1ed211b1-02df-4cc3-a017-4a55236d744c", "value": "https://www.virustotal.com/gui/file/d7cd9e7d257ca4180c1d33f3bcbf4d3df4388e6afe1618f09388641ec2f8ed9e/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:05+00:00", "timestamp": "1784926805", "to_ids": true, "type": "ip-dst", "uuid": "612dba19-2d13-434c-a143-511fc878200f", "value": "38.143.57.11", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:05+00:00", "timestamp": "1784926805", "to_ids": false, "type": "url", "uuid": "12dd1a8e-d79f-48ef-a720-7c251b26cb26", "value": "https://api.github.com/repos/stamparm/maltrail/commits/45e66d723f168a9f5b856eae15f8c6e61efa7c89", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:05+00:00", "timestamp": "1784926805", "to_ids": true, "type": "domain", "uuid": "6c1a6dc1-0cf4-40c3-aff2-ca9d1aa41ac6", "value": "2026hoy.duckdns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:05+00:00", "timestamp": "1784926806", "to_ids": true, "type": "domain", "uuid": "16a9bed6-d4f9-47f4-9147-350bbebd97dc", "value": "511mon.kozow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:06+00:00", "timestamp": "1784926806", "to_ids": true, "type": "domain", "uuid": "8bb3aa41-d11f-4de0-a0ff-99abed750187", "value": "sacaroncha.duckdns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:06+00:00", "timestamp": "1784926806", "to_ids": false, "type": "url", "uuid": "e28ad455-7597-4336-b921-2cad6f71a193", "value": "https://api.github.com/repos/stamparm/maltrail/commits/969b1cde1e40a03b95a2b601b4a5178b05e96056", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:06+00:00", "timestamp": "1784926806", "to_ids": false, "type": "url", "uuid": "869d0f53-6ee2-4c03-b0ed-b5806c425fae", "value": "https://www.virustotal.com/gui/file/8069dc3a01b238d5506448abd7cddb3a7c583b81b209e516481b2923aac90782/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:06+00:00", "timestamp": "1784926806", "to_ids": true, "type": "ip-dst", "uuid": "85a905e5-4af2-44da-8624-6407d1b36554", "value": "209.94.56.212", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "asyncrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:06+00:00", "timestamp": "1784926806", "to_ids": true, "type": "domain", "uuid": "a7cff795-dc26-4b82-968f-63f27a8d8b0e", "value": "envioasy24.kozow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vjw0rm", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:06+00:00", "timestamp": "1784926807", "to_ids": false, "type": "url", "uuid": "25615dd6-916a-4b79-b176-a98db59f9fc4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3bbc58464018603b2c1e1ce4e18fedbfd767ea37", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vjw0rm", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:07+00:00", "timestamp": "1784926807", "to_ids": false, "type": "url", "uuid": "55d8ba96-a7a2-4a28-ba85-8879310ba2ca", "value": "https://x.com/FABO97662188/status/2080679471993049528", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vjw0rm", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:07+00:00", "timestamp": "1784926807", "to_ids": false, "type": "url", "uuid": "8aa92d0b-2892-422e-996c-948858e65d57", "value": "https://www.virustotal.com/gui/file/9dec582e808a71dc03c07e99898096c561427e4bf71cb9ecc03f3a2629ffef78/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vjw0rm", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:07+00:00", "timestamp": "1784926807", "to_ids": false, "type": "url", "uuid": "097a4ea7-b056-46c4-b73d-3b644421bfb2", "value": "https://www.virustotal.com/gui/file/15c25b66b6b88ab2950bf767040edd2e1e35b1787909b09f9a09aafcb17096e6/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vjw0rm", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T21:00:07+00:00", "timestamp": "1784926807", "to_ids": true, "type": "domain", "uuid": "2364d9b4-e48a-4f8b-ab45-59f7585bfb25", "value": "brebe01.duckdns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:04+00:00", "timestamp": "1784930404", "to_ids": false, "type": "url", "uuid": "0b7778bb-76f5-440c-be5a-d564afcdda4c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f54d3d09bb71c22c39d23f7e7c9ee7a916884289", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:04+00:00", "timestamp": "1784930405", "to_ids": false, "type": "url", "uuid": "a5014e32-344f-4087-a91b-8c98ec1991d5", "value": "https://tria.ge/260724-p7ectsen3t/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:05+00:00", "timestamp": "1784930405", "to_ids": true, "type": "ip-dst", "uuid": "aa65e252-86d7-4ce5-b118-26bb16d88256", "value": "51.146.240.219", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:05+00:00", "timestamp": "1784930405", "to_ids": true, "type": "domain", "uuid": "d05aae2a-ff04-4b53-b81c-6250e266c90b", "value": "admin.tiefixy.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:05+00:00", "timestamp": "1784930405", "to_ids": true, "type": "domain", "uuid": "1bc73d90-ac7d-4a84-b274-1eedfc4c35ae", "value": "amc-us.mprevive.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:05+00:00", "timestamp": "1784930406", "to_ids": true, "type": "domain", "uuid": "2a3868ad-cbbe-4e8e-8af2-2de166526e88", "value": "cdn.clintonpqfg-adriance.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:06+00:00", "timestamp": "1784930406", "to_ids": true, "type": "domain", "uuid": "15f800e5-2c89-4b7e-b510-d2b24a962013", "value": "clintonpqfg-adriance.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:06+00:00", "timestamp": "1784930406", "to_ids": true, "type": "domain", "uuid": "228609a6-c9c9-4d2d-88ce-6bc8a479cc97", "value": "demo.tiefixy.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:06+00:00", "timestamp": "1784930406", "to_ids": true, "type": "domain", "uuid": "09715dc3-c146-4182-bacc-6b9074174ae3", "value": "jordan.tiefixy.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:06+00:00", "timestamp": "1784930406", "to_ids": true, "type": "domain", "uuid": "8e49c91d-4d82-4113-823b-916720fad28f", "value": "mprevive.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:06+00:00", "timestamp": "1784930406", "to_ids": true, "type": "domain", "uuid": "ce64c147-4c5a-45ca-9fa5-5acaa383af35", "value": "tiefixy.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:06+00:00", "timestamp": "1784930407", "to_ids": false, "type": "url", "uuid": "df4c3687-9448-4a36-936c-45f67f0a5064", "value": "https://api.github.com/repos/stamparm/maltrail/commits/9e94b62d6c63de21c9e7f390665b700d6b8e977d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:07+00:00", "timestamp": "1784930407", "to_ids": false, "type": "url", "uuid": "fcbe56db-cd62-4530-8ba5-83fff26febd1", "value": "https://x.com/skocherhan/status/2080761455234720245", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:07+00:00", "timestamp": "1784930407", "to_ids": false, "type": "url", "uuid": "c6e26779-2413-47ce-aab4-5402d0dd0cfb", "value": "https://www.virustotal.com/gui/file/31de616a683a4af7a3f711f29243426dda5eabcacdf7879203a8d3fbb1a808f6/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:07+00:00", "timestamp": "1784930407", "to_ids": false, "type": "url", "uuid": "1dad8e5f-ce54-4d1c-b7f9-978df5022fa5", "value": "https://www.virustotal.com/gui/file/32e4019d148109dc2f4fd04f2e1207b902ffe0dcdaae4b7118fc8fc8c6ca62ef/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:07+00:00", "timestamp": "1784930407", "to_ids": false, "type": "url", "uuid": "7a815f56-3e62-4dce-b211-b9a54c5374cf", "value": "https://www.virustotal.com/gui/file/3d43d9f3c0c89a1b810f655bdb199eaeb8c806059187157a45edf0504459b964/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:07+00:00", "timestamp": "1784930408", "to_ids": true, "type": "ip-dst", "uuid": "1a685b48-01aa-4642-a6bd-8fcbe236782b", "value": "45.137.10.110", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:08+00:00", "timestamp": "1784930408", "to_ids": true, "type": "domain", "uuid": "09e77d5a-14db-4075-9a16-17ca373c3ed6", "value": "gstatic-analysis.beijing-cn1.oo0.be", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:08+00:00", "timestamp": "1784930408", "to_ids": false, "type": "url", "uuid": "7b54dc16-d1ff-467f-8d1a-f013d826ec8c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ba0e3be8e59896984d5dac422ce5ebb5895bfc3a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:08+00:00", "timestamp": "1784930408", "to_ids": false, "type": "url", "uuid": "db9b307b-d9c1-43d8-85fa-9cd3e2bd3acb", "value": "https://x.com/skocherhan/status/2080768637040730375", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:08+00:00", "timestamp": "1784930408", "to_ids": false, "type": "url", "uuid": "b609052b-95f2-47f2-9d9a-77425f188702", "value": "https://www.virustotal.com/gui/ip-address/64.89.161.173/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:08+00:00", "timestamp": "1784930408", "to_ids": true, "type": "domain", "uuid": "ad171fe5-860d-4a20-a5e4-0639fc79ef1f", "value": "abangan.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:08+00:00", "timestamp": "1784930409", "to_ids": true, "type": "domain", "uuid": "36697fbb-d678-45ab-a89f-13260b2731da", "value": "beechea.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:09+00:00", "timestamp": "1784930409", "to_ids": true, "type": "domain", "uuid": "f2d3f2e2-aed6-4e95-b988-34d1852f7c49", "value": "choppyi.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:09+00:00", "timestamp": "1784930409", "to_ids": true, "type": "domain", "uuid": "7242fd81-db9d-45bf-8bdf-a637f89260ab", "value": "deckerh.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:09+00:00", "timestamp": "1784930409", "to_ids": true, "type": "domain", "uuid": "1bdf4ea4-7a2a-4f41-a9ba-f23c1c6c27a2", "value": "desexur.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:09+00:00", "timestamp": "1784930409", "to_ids": true, "type": "domain", "uuid": "c834e47c-5b63-4d7f-a235-40f33ff4cd4e", "value": "encephw.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:09+00:00", "timestamp": "1784930409", "to_ids": true, "type": "domain", "uuid": "0e07f3ed-5f4e-4ff5-b634-c1d4899390b4", "value": "genuscr.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:09+00:00", "timestamp": "1784930410", "to_ids": true, "type": "domain", "uuid": "5e1de402-1003-4b1d-83ae-df865eaf39ee", "value": "matchny.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:10+00:00", "timestamp": "1784930410", "to_ids": false, "type": "url", "uuid": "6b21500f-a710-4940-9e85-ae1fac2cdd4f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/acd259a780cd660811a322e6cf173b32a807ffe2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:10+00:00", "timestamp": "1784930410", "to_ids": false, "type": "url", "uuid": "30fcd5fd-6557-4b62-ac16-6a98b90bb8eb", "value": "https://www.virustotal.com/gui/file/bc407097ee137184b145516a4830a3a3b768dedf4fb1b8b4a2ad548b4b20d55a/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:10+00:00", "timestamp": "1784930410", "to_ids": true, "type": "ip-dst", "uuid": "3aa8a450-2108-4f44-931c-2518781f18d7", "value": "216.107.139.88", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:10+00:00", "timestamp": "1784930410", "to_ids": false, "type": "url", "uuid": "8577fc0f-5e60-4346-adbd-b2ee5c2293df", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d1bd426c872dbafeba5c73dcb871b08b338299bc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:10+00:00", "timestamp": "1784930410", "to_ids": false, "type": "url", "uuid": "d14ecbf6-4a52-4e97-a7cf-8a8b0f848427", "value": "https://x.com/L0Psec/status/2080711424167362654", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:10+00:00", "timestamp": "1784930411", "to_ids": false, "type": "url", "uuid": "c14067fd-dbed-4f1a-acd2-7a6e89ba01da", "value": "https://www.virustotal.com/gui/file/3c254614de8c1a2f213c526b0e5072d43ffeb7cc340d9a4a6ebaa16592b3bbe0/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:11+00:00", "timestamp": "1784930411", "to_ids": false, "type": "url", "uuid": "c9e6f3b0-4426-48a8-9afa-4e8532c71adb", "value": "https://www.virustotal.com/gui/file/188bd4fc222c9615540884920caf37ea88bcbea7488e1fb98709e357dd096666/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:11+00:00", "timestamp": "1784930411", "to_ids": false, "type": "url", "uuid": "6844d87d-a161-4a50-a662-9f76ad10ec38", "value": "https://www.virustotal.com/gui/file/451b586ec9d3c997b319986a1177829653e8ae641c953c05ede6a38616f2da97/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:11+00:00", "timestamp": "1784930411", "to_ids": true, "type": "domain", "uuid": "f182b528-7eeb-4981-8287-886847220d6b", "value": "arusupport-region1-webhook.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:11+00:00", "timestamp": "1784930411", "to_ids": true, "type": "domain", "uuid": "94496f3e-e7d0-4740-ae66-b45509830e39", "value": "stage-fashion365.vercel.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_gaslight", "deleted": false, "disable_correlation": false, "last_seen": "2026-07-24T22:00:11+00:00", "timestamp": "1784930411", "to_ids": true, "type": "domain", "uuid": "602f5357-a48f-4f0e-9d34-c7646ff257ea", "value": "supportaru.serveftp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }