{ "Event": { "analysis": "1", "date": "2026-05-26", "extends_uuid": "", "info": "Maltrail IOC for 2026-05-27", "publish_timestamp": "1779919204", "published": true, "threat_level_id": "2", "timestamp": "1779912007", "uuid": "9a4ef3c0-d447-4f61-b72c-46d3acbbb1d2", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:07+00:00", "timestamp": "1779868807", "to_ids": false, "type": "url", "uuid": "181b66e9-4e2a-4b47-b221-c40b6c959618", "value": "https://api.github.com/repos/stamparm/maltrail/commits/64f398a70b9001b8149676f0414fbd67bc85e368", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:07+00:00", "timestamp": "1779868807", "to_ids": true, "type": "domain", "uuid": "15c9ba97-33bb-4359-b5a3-05b8229d3fbc", "value": "pinglepis.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:07+00:00", "timestamp": "1779868807", "to_ids": true, "type": "domain", "uuid": "6d025742-04dd-40d0-ab8f-853728bfe9af", "value": "sockmind.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:07+00:00", "timestamp": "1779868807", "to_ids": false, "type": "url", "uuid": "d82c7ddb-e356-4b62-b62b-eacf40dd24b5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0f3e1d88cf957fbf7e7e5143deedc64d59510ddb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:07+00:00", "timestamp": "1779868808", "to_ids": false, "type": "url", "uuid": "34f3c588-171a-42e2-a771-56efd83d610a", "value": "https://x.com/AlvieriD/status/2059538106362036250", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:08+00:00", "timestamp": "1779868808", "to_ids": true, "type": "domain", "uuid": "17ddac22-c877-4f57-b9f9-ecfaae64f270", "value": "shinyhunte.red", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:08+00:00", "timestamp": "1779868808", "to_ids": false, "type": "url", "uuid": "52db94cf-cb3c-4fff-9f03-8d3805bfffc9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3ca103ca8394884a9b891350789cab23b0c378ed", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:08+00:00", "timestamp": "1779868808", "to_ids": false, "type": "url", "uuid": "95ce3989-50ac-41f7-a8c9-99a406359a48", "value": "https://x.com/patialavii/status/2059508901507428597", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:08+00:00", "timestamp": "1779868808", "to_ids": true, "type": "domain", "uuid": "81ea75ab-620d-406c-9f2b-77f0a6ff87f4", "value": "imajinandfusion.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:08+00:00", "timestamp": "1779868808", "to_ids": true, "type": "domain", "uuid": "4dcdd2cc-f613-47bb-8963-e2ffb3a8cbe9", "value": "sacp.algoma.it", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:08+00:00", "timestamp": "1779868809", "to_ids": false, "type": "url", "uuid": "9af2e399-19cd-4226-8e6a-6468a16f8313", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8c9b09abab38972f195544ae1ff91d458d552931", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:09+00:00", "timestamp": "1779868809", "to_ids": true, "type": "domain", "uuid": "ceef9cc8-3624-4ec4-9bd3-0b98b1580e81", "value": "cdn-reports.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:09+00:00", "timestamp": "1779868809", "to_ids": false, "type": "url", "uuid": "cdbe6fd0-0bf0-4f8e-8fcb-1bd4a14ef623", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d4d23f3e6524855d32bf14d9d51e4515c7953f76", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:09+00:00", "timestamp": "1779868809", "to_ids": true, "type": "domain", "uuid": "798e55ef-2d59-447c-b746-8d13e75214fb", "value": "refreshwss.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:09+00:00", "timestamp": "1779868809", "to_ids": false, "type": "url", "uuid": "55f66456-f083-49f7-aa16-0e6da3515437", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c4e133882926e531519056e45dd58142ab31ee2f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:09+00:00", "timestamp": "1779868809", "to_ids": false, "type": "url", "uuid": "b57e2ffa-e4c7-4fc1-8989-9a6f3ebf9bf1", "value": "https://x.com/JAMESWT_WT/status/2059517877951103080", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:09+00:00", "timestamp": "1779868810", "to_ids": false, "type": "url", "uuid": "4db76093-6356-42a3-90dc-6226d67152ca", "value": "https://app.any.run/tasks/ca2e99cd-6247-4633-9cd8-f64b4928ed9c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:10+00:00", "timestamp": "1779868810", "to_ids": true, "type": "ip-dst", "uuid": "4e58d512-7aba-4752-9be3-10a1df5f20ff", "value": "209.99.186.243", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:10+00:00", "timestamp": "1779868810", "to_ids": true, "type": "ip-dst", "uuid": "73953c80-9bff-46e9-9b74-49d3156f31c1", "value": "209.99.186.75", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:10+00:00", "timestamp": "1779868810", "to_ids": true, "type": "domain", "uuid": "2fcbd988-62e3-4d83-8f8b-b7eef76db061", "value": "bryonsad.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:10+00:00", "timestamp": "1779868810", "to_ids": true, "type": "domain", "uuid": "4411bcf7-246c-497a-9cfc-5cafb90a3329", "value": "feersona.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:10+00:00", "timestamp": "1779868810", "to_ids": false, "type": "url", "uuid": "726b6c58-37b7-4abf-b407-59d5193a2351", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d9c34b7e035cd86eb2b2578cbdb608bb6ea2abce", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:11+00:00", "timestamp": "1779868811", "to_ids": true, "type": "domain", "uuid": "b75b300e-8912-43b7-bea5-aba3d2d3e7ea", "value": "security-check-guest.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bad_service", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:11+00:00", "timestamp": "1779868811", "to_ids": false, "type": "url", "uuid": "89345715-9133-4543-8e73-ef9fd5d9141c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0176728d93d35e8b8605cb49f212c4b19580b0bb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bad_service", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:11+00:00", "timestamp": "1779868811", "to_ids": false, "type": "url", "uuid": "8ac2bf58-10aa-480d-8822-6e0d70afe96e", "value": "https://x.com/Fact_Finder03/status/2059520666798555253", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bad_service", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:11+00:00", "timestamp": "1779868811", "to_ids": true, "type": "domain", "uuid": "b1c0b4d1-7762-41bf-b12d-3ed71dd8d728", "value": "stealer.in", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:11+00:00", "timestamp": "1779868812", "to_ids": false, "type": "url", "uuid": "1def77f2-f122-4e75-9576-aa500d446dd5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/4b2d1fc0bc8924f1f77ce355c583babd402b3822", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:12+00:00", "timestamp": "1779868812", "to_ids": true, "type": "ip-dst", "uuid": "0278a8e4-32e5-47d9-8b73-b2f5f78743d2", "value": "5.188.87.210", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:12+00:00", "timestamp": "1779868812", "to_ids": false, "type": "url", "uuid": "f9bc48c9-db2a-4d5b-bf64-3189bb0e7a56", "value": "https://api.github.com/repos/stamparm/maltrail/commits/388ba25260f6c9eccf529bd6d3fd097993badb9b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:12+00:00", "timestamp": "1779868812", "to_ids": true, "type": "ip-dst", "uuid": "c1ce8d29-0e1e-4e21-a568-6c1885da3ee7", "value": "103.146.202.144", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:12+00:00", "timestamp": "1779868812", "to_ids": true, "type": "ip-dst", "uuid": "783fc2bc-3f6f-4bc2-9c8f-35a6f6e54488", "value": "154.219.121.168", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:12+00:00", "timestamp": "1779868813", "to_ids": true, "type": "domain", "uuid": "e2e473ea-25ec-408b-a2a1-36607e6063fc", "value": "geyefan.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:13+00:00", "timestamp": "1779868813", "to_ids": false, "type": "url", "uuid": "bffe6ae4-b39a-4fd2-8edc-9aa708afed70", "value": "https://api.github.com/repos/stamparm/maltrail/commits/735f3d3849c59bca95e0fb30a6bc137ba8872653", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:13+00:00", "timestamp": "1779868813", "to_ids": true, "type": "domain", "uuid": "c696ff80-62d1-47c0-9585-adb38fa173c5", "value": "socket-protect.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:13+00:00", "timestamp": "1779868813", "to_ids": false, "type": "url", "uuid": "dbd35d3f-f1fb-49e0-8bfd-c0e194637965", "value": "https://api.github.com/repos/stamparm/maltrail/commits/25f8d2c0721a91f0e90a962a217cfa016c3be0af", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:13+00:00", "timestamp": "1779868813", "to_ids": true, "type": "domain", "uuid": "fbe62bd6-a427-4511-8184-593f47249ab5", "value": "cleane.pw", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:13+00:00", "timestamp": "1779868813", "to_ids": false, "type": "url", "uuid": "52f91b2e-cfe8-479d-b165-c215d733829b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/9fa352f418b5be8f9d96b7e38532a86ec213abbb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:13+00:00", "timestamp": "1779868814", "to_ids": false, "type": "url", "uuid": "549f06d1-9903-47ae-bda8-f280b6231bad", "value": "https://x.com/SquiblydooBlog/status/2059412842030494185", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:14+00:00", "timestamp": "1779868814", "to_ids": true, "type": "domain", "uuid": "160c8c47-aa9d-4fbc-b8e1-2fb1de2f4227", "value": "storeappsupdatesapi.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:14+00:00", "timestamp": "1779868814", "to_ids": true, "type": "domain", "uuid": "0e294403-c02e-4c91-92dd-9890f9240c32", "value": "app1.storeappsupdatesapi.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:14+00:00", "timestamp": "1779868814", "to_ids": true, "type": "domain", "uuid": "22eb835d-ac48-4483-8d68-dc897a6b09d7", "value": "app2.storeappsupdateapi.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:14+00:00", "timestamp": "1779868814", "to_ids": false, "type": "url", "uuid": "0827981b-caf2-4501-a8f3-d15114ac7798", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8c4f6d785d8d82e88e9ccd81293c197c89a5cc11", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:14+00:00", "timestamp": "1779868814", "to_ids": true, "type": "ip-dst", "uuid": "93f259cf-f821-4eb4-9d1a-c3f37f53c1c0", "value": "72.60.77.221", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T08:00:15+00:00", "timestamp": "1779868815", "to_ids": true, "type": "domain", "uuid": "d523034e-aabc-4a09-843b-04d1d9460557", "value": "guildsmartchainpulse.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872404", "to_ids": false, "type": "url", "uuid": "8a7ee827-74d0-49a6-ade9-2b3709e4d823", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0fc10a0fc7103b5712d31e4f7b3e861a6186804e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872404", "to_ids": true, "type": "domain", "uuid": "00389664-9cf9-4e28-a44a-342cf4edd66a", "value": "acesseconviteprincipal.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872404", "to_ids": true, "type": "domain", "uuid": "1d204f2b-4d93-4f1a-a39f-64789b6b8451", "value": "acessomundialvip.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872404", "to_ids": true, "type": "domain", "uuid": "96a7daa3-8281-4822-ae74-48405e16a13e", "value": "altahirexpressmrx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872404", "to_ids": true, "type": "domain", "uuid": "5136b0e7-3f70-4cfc-a5ee-206ca81a9b46", "value": "altprojetosobras.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872404", "to_ids": true, "type": "domain", "uuid": "02acba27-f5ad-4a73-a0db-efa5368c6d20", "value": "assesoriabonline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:04+00:00", "timestamp": "1779872405", "to_ids": true, "type": "domain", "uuid": "9c87c661-456f-45fe-8ef3-d4912436d7bd", "value": "assessoriaonlinebr.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:05+00:00", "timestamp": "1779872405", "to_ids": true, "type": "domain", "uuid": "c24cc6a5-c82d-4375-a2bd-90aeb57bb8f9", "value": "bazanbusinessco.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:05+00:00", "timestamp": "1779872405", "to_ids": true, "type": "domain", "uuid": "918b8ce6-2373-457e-8824-81d2c690e84e", "value": "bb-altus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:05+00:00", "timestamp": "1779872405", "to_ids": true, "type": "domain", "uuid": "346a8fe8-3422-4582-ad60-12b2cb3374d7", "value": "benefonline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:05+00:00", "timestamp": "1779872405", "to_ids": true, "type": "domain", "uuid": "929f3406-63b7-415c-9b67-a59f9805c64a", "value": "bremengruposauds.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:05+00:00", "timestamp": "1779872405", "to_ids": true, "type": "domain", "uuid": "a1abbee4-6640-43f8-8d50-f48061e7c218", "value": "ccorodoviazfreeflow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:05+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "1ff8c1bf-b36b-4453-ac63-c8bc2bfd86d0", "value": "ccroviazfreeflow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "cec90662-0f4f-46eb-8a55-8a29a50122ab", "value": "cerenquiliamx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "b5730375-d6c3-4a0f-b41b-46ff72af4743", "value": "clklegaldesign.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "9e74b576-ce04-4127-af70-c5c4d620b45a", "value": "cnvitedigitalbrdl.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "4d4e7cbd-6c9a-4039-a3a0-df03071d245a", "value": "cnviteprinconline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "07e66a98-5492-47ca-a02e-96088d4a4999", "value": "conviteglobalonline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872406", "to_ids": true, "type": "domain", "uuid": "cdfd4535-7366-4b52-85ce-24b52dff2958", "value": "corptepremiumrx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:06+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "25a4c375-c337-40f7-90aa-dd1b1387cc3a", "value": "crvamericanmrx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "3dbe813f-9d28-437e-9c93-24cd5895e4f9", "value": "cvtamerimraxkr.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "96373f0f-61f7-43e9-8a73-07cb41fbb4ce", "value": "cvteprincipalonline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "e25719a7-6c8e-466b-9b71-1f7b32fbed2a", "value": "cvtmrpremiumx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "33a42d15-480e-4596-8970-c8a71e73a972", "value": "cvtmxrpremiumx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "652f0636-e6f0-49be-878a-969ffcb00073", "value": "cvtprinconline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872407", "to_ids": true, "type": "domain", "uuid": "5b358acf-3cc8-4098-ad03-6e7ec3ccb52a", "value": "deguiemoves.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:07+00:00", "timestamp": "1779872408", "to_ids": true, "type": "domain", "uuid": "7ab93736-5609-4c28-bc98-07053443e08c", "value": "limpremiumbrd.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:08+00:00", "timestamp": "1779872408", "to_ids": true, "type": "domain", "uuid": "20ff3c3c-8f11-49b2-8d1a-0552e067d632", "value": "meuappedigital.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:08+00:00", "timestamp": "1779872408", "to_ids": true, "type": "domain", "uuid": "a04d8f0c-0774-4718-accc-ec192605aaaf", "value": "meufreeflowrccrodoviaz.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:08+00:00", "timestamp": "1779872408", "to_ids": true, "type": "domain", "uuid": "a88955b1-3a1f-4345-84cc-cbcb45486b75", "value": "meufreeflowroccrdoviaz.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:08+00:00", "timestamp": "1779872408", "to_ids": true, "type": "domain", "uuid": "9a21634c-bc19-4acd-a1e8-c8d6ad7103a5", "value": "netempresaspremium.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:08+00:00", "timestamp": "1779872408", "to_ids": true, "type": "domain", "uuid": "cc32679e-ccab-4d42-a18b-194c6198139b", "value": "portalchavmrbdr.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:08+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "eba8df87-46a3-406c-bb56-e34d0f1e2da0", "value": "premiumconvitebrd.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "24bb4880-7a8d-4947-a3a5-6fb686a03688", "value": "principonlinebelmx.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "73e7306f-cc5f-45da-ba5e-633c97b7ce42", "value": "qualifisionemp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "c1d30e26-30cd-42ff-9696-9c5112fa8ac5", "value": "salomonelawfirm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "30346fe2-f59d-422d-b6d3-a3dfbbdee885", "value": "santofoodco.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "16fb3ee1-175d-44e0-8538-99233bed2420", "value": "sejbrdapremium.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872409", "to_ids": true, "type": "domain", "uuid": "11056813-823d-4347-8585-8a1f49c59f5c", "value": "sejconviteglobal.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:09+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "b8d2f0b2-7b7c-45e3-be9d-13f8e4211f56", "value": "sejpremiebrid.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "b5aadac9-edee-436d-8540-dd9333e1802b", "value": "sejprincipalbr.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "537a7c8c-ec94-4912-b3ca-a455b995563d", "value": "sejprincipalbrd.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "f2899099-3df4-42de-8b10-8344df9c9600", "value": "servicochavesmrx1.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "3c812d70-ca34-4984-a576-67666dfa27a7", "value": "sigconstrugroup.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "4b028053-79ea-4b25-ab1b-1d07c064f71b", "value": "sync-simpliconline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872410", "to_ids": true, "type": "domain", "uuid": "63b36e0c-b8bc-47c7-84a4-4872e94f56ff", "value": "uromagiservicos.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:10+00:00", "timestamp": "1779872411", "to_ids": false, "type": "url", "uuid": "d95adbba-ed90-4cb6-89df-6dd29454a4f5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/64dca1c3bd4a08c617bb88b6fbe654c8b7ba2c76", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:11+00:00", "timestamp": "1779872411", "to_ids": true, "type": "ip-dst", "uuid": "4d761f4b-88ec-4eed-935a-f1ca5fea7e39", "value": "45.178.181.218", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:11+00:00", "timestamp": "1779872411", "to_ids": true, "type": "domain", "uuid": "bb6b8cf2-1eff-4d7e-bbe1-cd9d98ed03be", "value": "starmail.mom", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:11+00:00", "timestamp": "1779872411", "to_ids": true, "type": "domain", "uuid": "15b77a06-258c-48fb-bb8f-8b20fc855d08", "value": "ioperador.ddns.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:11+00:00", "timestamp": "1779872411", "to_ids": true, "type": "domain", "uuid": "03ff68ba-829a-4c92-97e4-f9d66c1e28b8", "value": "remote.starmail.mom", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:11+00:00", "timestamp": "1779872411", "to_ids": true, "type": "domain", "uuid": "2c6cf3d6-85ed-43c9-a4aa-9c8690bac99b", "value": "painel.starmail.mom", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:11+00:00", "timestamp": "1779872412", "to_ids": false, "type": "url", "uuid": "154c6e96-d073-4042-8c91-1b12564a4f64", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ff198c1167f4f55e34952a6ed6edb446a0a92530", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872412", "to_ids": false, "type": "url", "uuid": "7b3e9ae1-7cb0-4b96-acb1-2353a96c0fec", "value": "https://x.com/malwrhunterteam/status/2059544369305124875", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872412", "to_ids": false, "type": "url", "uuid": "ad27e293-6dc0-45d6-ae79-898a84b963e0", "value": "https://www.virustotal.com/gui/file/c2ab5404c2e2e7d15c58a1bbab2a6daa857f43aa4137cce738ed5139e77310ff/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872412", "to_ids": true, "type": "domain", "uuid": "5c9e3411-e13b-4c4e-9aa3-10c65d4c37b9", "value": "aglobaconvite.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872412", "to_ids": true, "type": "domain", "uuid": "becca656-9118-4d3b-a168-0ea065701a3f", "value": "ddins.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872412", "to_ids": true, "type": "domain", "uuid": "8f12bb31-8416-47d4-8cf7-3f268faa8259", "value": "remoto.ddins.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "banload", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872412", "to_ids": true, "type": "domain", "uuid": "46455e73-40dd-44cc-bd21-47ed6d29b46e", "value": "painel.ddins.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:12+00:00", "timestamp": "1779872413", "to_ids": false, "type": "url", "uuid": "1e02dca1-6086-4cbc-a789-769e44bcd448", "value": "https://api.github.com/repos/stamparm/maltrail/commits/032df4b67d85b14a63c263bd2ca3ea9bd694736a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:13+00:00", "timestamp": "1779872413", "to_ids": true, "type": "domain", "uuid": "d4547789-52cd-4a9d-97aa-3a0236cac999", "value": "filecrystalnest.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:13+00:00", "timestamp": "1779872413", "to_ids": true, "type": "domain", "uuid": "2ae9cb60-79bf-4d94-b7fc-c58350950d7d", "value": "filefrozenpixel.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:13+00:00", "timestamp": "1779872413", "to_ids": true, "type": "domain", "uuid": "77a2a456-aa5a-43cf-9134-d290f8636a17", "value": "filegoldenrocket.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:13+00:00", "timestamp": "1779872413", "to_ids": true, "type": "domain", "uuid": "53bc3ac7-f6d8-4ca7-88a1-7abce919e424", "value": "fileluckyfalcon.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:13+00:00", "timestamp": "1779872413", "to_ids": true, "type": "domain", "uuid": "7d7d5b02-1358-466d-b2f0-aaa53c8bec0d", "value": "macstorage.replit.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:13+00:00", "timestamp": "1779872413", "to_ids": false, "type": "url", "uuid": "09da175d-393a-4bc6-9f14-336945f4ca32", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ed5e7ef7becebafc520b43454d65d5ec42244b94", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872414", "to_ids": false, "type": "url", "uuid": "bd9ba365-8b54-43e9-baf7-a891d7b5fee6", "value": "https://x.com/smica83/status/2059397307515171065", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872414", "to_ids": true, "type": "ip-dst", "uuid": "f556742d-075f-455b-82a7-00d1e6a8031a", "value": "85.239.144.177", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872414", "to_ids": false, "type": "url", "uuid": "28799e8d-10e1-4f14-ba35-32146821550e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b0f70676b0a13ae4f11a53c622956614d4128295", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872414", "to_ids": false, "type": "url", "uuid": "77723d63-783f-4071-be6e-11d74b5a65ae", "value": "https://x.com/smica83/status/2059346645662203954", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872414", "to_ids": false, "type": "url", "uuid": "c91440d6-34a0-4223-a50f-7ae8c1a9902e", "value": "https://www.virustotal.com/gui/file/314faa2e399963cbd0b317b50c43e42259dbb2403afd29f583c0e8b6ba711070/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872414", "to_ids": false, "type": "url", "uuid": "a58226f2-56d0-4bdb-b6a5-520462224ddb", "value": "https://www.virustotal.com/gui/file/ad7ec08e3118c2221291247df65a86dbb5929bb6092b57fbab3dc8b07c9157fa/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T09:00:14+00:00", "timestamp": "1779872415", "to_ids": true, "type": "ip-dst", "uuid": "ca9f1df5-cd2d-4828-9a6d-8ff74fb0cd12", "value": "143.14.179.112", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:04+00:00", "timestamp": "1779876004", "to_ids": false, "type": "url", "uuid": "b7d1c45c-5677-46fd-9e5a-5b2ba19fbe1f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/363309973584350a3fc5295389231cbf7c79add8", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:04+00:00", "timestamp": "1779876005", "to_ids": true, "type": "ip-dst", "uuid": "59228562-d121-4c0c-b465-9476c0b95c27", "value": "204.10.194.247", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:05+00:00", "timestamp": "1779876005", "to_ids": false, "type": "url", "uuid": "3bdf9918-2c0f-4b0d-9f57-978c974543d4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/23f50afdac4c6f3c04ceeeeb3178c6b64f2f467d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:05+00:00", "timestamp": "1779876005", "to_ids": false, "type": "url", "uuid": "60922b9e-ad18-485b-b13a-a9207ff11c38", "value": "https://x.com/safedepio/status/2059386595317317964", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:06+00:00", "timestamp": "1779876006", "to_ids": false, "type": "url", "uuid": "1d9486f0-a025-4828-96da-163f408d7edb", "value": "https://safedep.io/malicious-forge-jsx-npm-rat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:06+00:00", "timestamp": "1779876006", "to_ids": false, "type": "url", "uuid": "59ba0371-5e49-4aad-8fee-c2963ae56fb8", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e0759907d2b1b887eecd3fdd33a6d6fb54152cfc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:06+00:00", "timestamp": "1779876006", "to_ids": false, "type": "url", "uuid": "1c07119a-312e-4aa5-98f3-ada41b07e179", "value": "https://x.com/patialavii/status/2059503757726302229", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:06+00:00", "timestamp": "1779876006", "to_ids": true, "type": "domain", "uuid": "11ed14d1-e6f6-4cbd-8661-5c88e6039ca9", "value": "web-zorm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:06+00:00", "timestamp": "1779876007", "to_ids": false, "type": "url", "uuid": "cc2f90f9-4fd6-47c7-87c6-34fddfa1c171", "value": "https://api.github.com/repos/stamparm/maltrail/commits/51a3c190e7ddfc2bb53f06d10b9393ca253d92c0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:07+00:00", "timestamp": "1779876007", "to_ids": false, "type": "url", "uuid": "52045976-05e2-4170-8dc3-66f27292cb6e", "value": "https://x.com/patialavii/status/2059501603842105563", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:07+00:00", "timestamp": "1779876007", "to_ids": true, "type": "domain", "uuid": "adf8aa8e-7613-48af-bac0-5f6d5505c53f", "value": "amerilifegh.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:07+00:00", "timestamp": "1779876007", "to_ids": false, "type": "url", "uuid": "4b3ebc4f-928a-4ca5-ad82-ce3e6e757663", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7c5bffb7f44fb06d63825a9f1ad89329b10e717f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:07+00:00", "timestamp": "1779876007", "to_ids": false, "type": "url", "uuid": "d3348444-9281-41eb-b8c8-b8e52838b454", "value": "https://cert.gov.ua/article/6315762", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:07+00:00", "timestamp": "1779876007", "to_ids": true, "type": "domain", "uuid": "b1c63eb9-c3fc-4765-a822-4b1a1e1d871c", "value": "a1si.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:07+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "5f0d5028-6446-4b5e-a3aa-1fa4e27cb427", "value": "alertapp.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:08+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "3b030379-8a20-4ec7-8892-55a4efe3f93f", "value": "cgdirector.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:08+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "b9761ff6-a860-4c8b-afe2-4ad7cc4f2428", "value": "xsjdsb.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:08+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "e84268f8-b136-4c6f-98e2-1cd3279e58f1", "value": "alerteddatalistsclients.alertapp.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:08+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "24f45f9d-d25e-49b9-85cb-f5d17f6d5550", "value": "a3ufz.xsjdsb.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:08+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "3b2fe9ce-7e3c-4020-825a-09028b45958f", "value": "advancedaisolutionsforeveryone.a1si.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc1151", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T10:00:08+00:00", "timestamp": "1779876008", "to_ids": true, "type": "domain", "uuid": "f994f7e5-8f2d-4639-af08-4b7bdab32109", "value": "productionsamplesoftheyear.cgdirector.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_overlayphantom", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:04+00:00", "timestamp": "1779879604", "to_ids": false, "type": "url", "uuid": "d0320fe3-d245-4146-a4c9-2a791700b7b0", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cbc3bedce425473761df3cfa17edbdb4d4776444", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_overlayphantom", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:04+00:00", "timestamp": "1779879605", "to_ids": true, "type": "ip-dst", "uuid": "493411f8-1666-4465-a4ff-cd476b474c1f", "value": "199.217.99.122", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_overlayphantom", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:05+00:00", "timestamp": "1779879606", "to_ids": false, "type": "url", "uuid": "20cc2632-4904-4964-86f7-bb091fedfb41", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3a63154145218577154a3073b6ff70ee55beb81b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_overlayphantom", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:06+00:00", "timestamp": "1779879606", "to_ids": false, "type": "url", "uuid": "a19305f8-b48d-4efa-8466-ff92e3f5e1da", "value": "https://cyble.com/blog/overlayphantom-android-banking-trojan", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_overlayphantom", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:06+00:00", "timestamp": "1779879606", "to_ids": false, "type": "url", "uuid": "dcca5471-25d5-42f5-bc23-4fe6cf68244e", "value": "https://www.virustotal.com/gui/file/8ddc1f2a75f3d5b5bd054a5367bd5015ebc90f3453d63c7cce438c12dc2ae86a/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_overlayphantom", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:07+00:00", "timestamp": "1779879607", "to_ids": true, "type": "domain", "uuid": "558fc500-e406-45bd-a809-fd4517817fa2", "value": "bitlrewards-app.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:07+00:00", "timestamp": "1779879607", "to_ids": false, "type": "url", "uuid": "f1517f48-73be-4096-a042-1f07d1e0e2cc", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f04ce18d880b477bbd6e88b3d13de8310992fdc7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:07+00:00", "timestamp": "1779879607", "to_ids": false, "type": "url", "uuid": "cb7d28d8-10e7-48b5-8bce-b28b630ae365", "value": "https://www.virustotal.com/gui/file/16ee8d6af960e9af3b87feafe87addb6f805ab0657028a16f5069fe7093e0dfa/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:07+00:00", "timestamp": "1779879607", "to_ids": true, "type": "ip-dst", "uuid": "aeda0fe1-8437-454e-b1b8-a84e6e75d658", "value": "102.220.160.85", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic_stealer", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:08+00:00", "timestamp": "1779879608", "to_ids": true, "type": "domain", "uuid": "6bbee36c-aedc-4733-ace6-6565ce2c7eca", "value": "lermontfile.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:08+00:00", "timestamp": "1779879608", "to_ids": false, "type": "url", "uuid": "12d0afbd-5625-4f25-ba28-3d6ab50caf2f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/477c98f216c1479366125180523e695f37c9678a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:08+00:00", "timestamp": "1779879608", "to_ids": false, "type": "url", "uuid": "6711e3cb-cdfb-4670-af1c-6341aad01f99", "value": "https://www.fortinet.com/blog/threat-research/phishing-campaign-deploys-javascript-driven-purelogs-variant-to-steal-sensitive-data", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "purelogs", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T11:00:08+00:00", "timestamp": "1779879608", "to_ids": true, "type": "ip-dst", "uuid": "48b53a16-0134-4cd5-ad63-96d340e64146", "value": "77.83.39.211", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:04+00:00", "timestamp": "1779883204", "to_ids": false, "type": "url", "uuid": "8fd3fb66-1cb6-41ad-8032-d1f2c768e0f2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ba2aeeb6040eb2b933ca6039654de873521951e8", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:04+00:00", "timestamp": "1779883204", "to_ids": false, "type": "url", "uuid": "a392f22d-4c04-4e9d-9f61-02d32c6cffd5", "value": "https://x.com/JAMESWT_WT/status/2059596666965991875", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:04+00:00", "timestamp": "1779883205", "to_ids": true, "type": "domain", "uuid": "0ec09fb7-10e3-4c35-ae00-7bd1dd321309", "value": "sharedrivedocuments.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:05+00:00", "timestamp": "1779883205", "to_ids": false, "type": "url", "uuid": "7784e4b7-59d3-427b-b97d-a1d497d80262", "value": "https://api.github.com/repos/stamparm/maltrail/commits/608ccf5f62c89944f2a8e539b300b309734599ba", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:05+00:00", "timestamp": "1779883205", "to_ids": true, "type": "domain", "uuid": "ba10200d-f220-44d5-9b42-297ca2a93fa2", "value": "aeons-echo.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:05+00:00", "timestamp": "1779883205", "to_ids": true, "type": "domain", "uuid": "204ffc82-0180-40d2-a662-22f0acf0cdf3", "value": "canvahow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:05+00:00", "timestamp": "1779883205", "to_ids": true, "type": "domain", "uuid": "4b90dc81-11eb-4aea-aa56-cb4eca47ed93", "value": "cpppemwjewjoiwejow.sale", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:05+00:00", "timestamp": "1779883206", "to_ids": true, "type": "domain", "uuid": "68f9d481-0f4f-48d6-a763-d6cef9c3a6e9", "value": "hugo-lapp.co", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:06+00:00", "timestamp": "1779883206", "to_ids": true, "type": "domain", "uuid": "95506a8b-5dd6-4904-8577-fd6e571e2ae2", "value": "vn.cpppemwjewjoiwejow.sale", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:06+00:00", "timestamp": "1779883206", "to_ids": true, "type": "domain", "uuid": "c34f1771-7dd2-46fd-ad5b-80c5c9431819", "value": "vn.hugo-lapp.co", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:06+00:00", "timestamp": "1779883206", "to_ids": true, "type": "domain", "uuid": "195a3fef-94b0-48b6-a87f-ac655ac5e7db", "value": "zebregts.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:06+00:00", "timestamp": "1779883206", "to_ids": false, "type": "url", "uuid": "6c29d6bf-a995-4ced-8781-491034475f65", "value": "https://api.github.com/repos/stamparm/maltrail/commits/411c0c6c4cfa0f566e5d8cf2c86c02e412ea54f2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:06+00:00", "timestamp": "1779883206", "to_ids": false, "type": "url", "uuid": "4d7224a8-fa0a-4677-8821-99a9cb0f48d8", "value": "https://www.virustotal.com/gui/file/04182538d940c58320e1faefdf6f8645e3270e498f8f41f073959a33e5e22559/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:06+00:00", "timestamp": "1779883207", "to_ids": true, "type": "ip-dst", "uuid": "c0b164c0-7289-480c-8e04-12435683d3f8", "value": "185.102.115.17", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:07+00:00", "timestamp": "1779883207", "to_ids": true, "type": "domain", "uuid": "89c1f7a8-184c-4a27-8aa9-bd3505816ce8", "value": "hippamsas.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:07+00:00", "timestamp": "1779883207", "to_ids": false, "type": "url", "uuid": "1c47b612-35d5-4a94-aa92-a2d08a522fc1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b49053f895915364d67b148012e83a081ffcfcb2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:07+00:00", "timestamp": "1779883207", "to_ids": false, "type": "url", "uuid": "b9487bc4-da30-4dde-a7f6-bed732080ee8", "value": "https://x.com/JAMESWT_WT/status/2059592061045690459", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:07+00:00", "timestamp": "1779883207", "to_ids": false, "type": "url", "uuid": "90fc0e32-a1f9-4efc-b6eb-eca802e2200f", "value": "https://www.virustotal.com/gui/file/79ad6db733805ffff0c251d25cbf911dedf3c78352ec5813742d164b11bf3e7c/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:08+00:00", "timestamp": "1779883208", "to_ids": false, "type": "url", "uuid": "963f4806-f767-43e9-b63e-76280ea8eced", "value": "https://www.virustotal.com/gui/file/177bfc846a77617931f7e6651a26df92511c7f60c0170001d67b982c09a677d1/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:08+00:00", "timestamp": "1779883208", "to_ids": true, "type": "ip-dst", "uuid": "b3872939-b98b-41b0-923a-93a5ac598904", "value": "5.252.177.201", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:08+00:00", "timestamp": "1779883208", "to_ids": true, "type": "ip-dst", "uuid": "c05dd99c-7e3c-4fab-b524-fc39c66a7a70", "value": "65.109.104.71", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:08+00:00", "timestamp": "1779883208", "to_ids": false, "type": "url", "uuid": "225843f6-5448-4c68-bc2d-23b56d3c2ccf", "value": "https://api.github.com/repos/stamparm/maltrail/commits/eb93dbb158c680892e0065d3c59264e1e3ac8fef", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:08+00:00", "timestamp": "1779883208", "to_ids": false, "type": "url", "uuid": "57bffe5a-ff4e-42aa-80cf-e0e46851b8ce", "value": "https://x.com/malwrhunterteam/status/2059582994382225904", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:08+00:00", "timestamp": "1779883208", "to_ids": false, "type": "url", "uuid": "880bd51a-8707-41f4-8c59-a54e79ba60f8", "value": "https://www.virustotal.com/gui/file/05aed8fa1453a78c1e771b1a9789ed469f32706a21fd1f542f7e5f4a99351896/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:09+00:00", "timestamp": "1779883209", "to_ids": true, "type": "ip-dst", "uuid": "aaf85dd5-fa63-433e-8ad5-303b6f7ed7de", "value": "34.151.244.225", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:09+00:00", "timestamp": "1779883209", "to_ids": true, "type": "domain", "uuid": "11737d5c-9951-43aa-b9aa-b425fbf31285", "value": "iqezmqm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:09+00:00", "timestamp": "1779883209", "to_ids": true, "type": "domain", "uuid": "db9b9a20-8620-40a2-9cca-fba1f491566d", "value": "ns1.iqezmqm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T12:00:09+00:00", "timestamp": "1779883209", "to_ids": true, "type": "domain", "uuid": "0757be2d-fb77-40f8-91ee-20bb1692f205", "value": "ns2.iqezmqm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:03+00:00", "timestamp": "1779886803", "to_ids": false, "type": "url", "uuid": "4851ae07-b66b-4b33-b106-0a4bb085abc1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/00f10daf33127a3b48846298dbcdae721fecf566", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:03+00:00", "timestamp": "1779886803", "to_ids": false, "type": "url", "uuid": "2474f7e4-664c-4511-88a0-00dde7674dc9", "value": "https://qiita.com/Y4er/items/0b6071745e4b7b240b3e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:03+00:00", "timestamp": "1779886804", "to_ids": false, "type": "url", "uuid": "398001de-f304-4958-b012-506e6c769e1d", "value": "https://www.virustotal.com/gui/file/f62f5e0a9eaa45b8b12aee62f52d40eada40c1f45d94d285c20d459d5a441e8f/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:04+00:00", "timestamp": "1779886804", "to_ids": true, "type": "ip-dst", "uuid": "bc12f599-ee74-46b7-9995-3b9da59dbb46", "value": "23.254.129.112", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:04+00:00", "timestamp": "1779886804", "to_ids": true, "type": "ip-dst", "uuid": "2cede655-7626-49bf-8e18-f5c2b0c2b1c8", "value": "47.236.249.101", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:04+00:00", "timestamp": "1779886804", "to_ids": true, "type": "ip-dst", "uuid": "496582bb-43d6-4282-8251-f5d5db73a21f", "value": "47.81.37.109", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:04+00:00", "timestamp": "1779886805", "to_ids": true, "type": "ip-dst", "uuid": "f417bf9b-8de3-443f-8633-61237b99476b", "value": "8.211.130.16", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:05+00:00", "timestamp": "1779886805", "to_ids": true, "type": "ip-dst", "uuid": "dea9c0be-ee50-4c22-b679-145c3259b931", "value": "8.213.217.130", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:05+00:00", "timestamp": "1779886805", "to_ids": true, "type": "domain", "uuid": "6183326c-fa27-4960-baf9-8184ea0df86a", "value": "contextlayerrun.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:05+00:00", "timestamp": "1779886805", "to_ids": true, "type": "domain", "uuid": "15e1a524-22e7-4d04-aee7-bf8d2b6486b3", "value": "discovercoded.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:05+00:00", "timestamp": "1779886805", "to_ids": true, "type": "domain", "uuid": "45b23306-5f38-4a46-a7f2-366cc8e6c07a", "value": "namefilecode.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:05+00:00", "timestamp": "1779886805", "to_ids": true, "type": "domain", "uuid": "26abbe57-a1dc-463d-92ed-322e2ec6bb4e", "value": "perfectgo.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:05+00:00", "timestamp": "1779886806", "to_ids": true, "type": "domain", "uuid": "1a37a4b7-9ed4-42c9-853c-5ec7831f2a8c", "value": "safelyhome.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:06+00:00", "timestamp": "1779886806", "to_ids": true, "type": "domain", "uuid": "b4799433-d3d7-46fe-94c6-c6281f8b20a4", "value": "specialclouds.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:06+00:00", "timestamp": "1779886806", "to_ids": true, "type": "domain", "uuid": "8fc1d2f7-e0a3-4cdf-b19f-baccd724d776", "value": "specialclouds.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:06+00:00", "timestamp": "1779886806", "to_ids": true, "type": "domain", "uuid": "ee1acf83-f16a-49e0-b309-35fe9e94f5bb", "value": "valuecode.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:06+00:00", "timestamp": "1779886806", "to_ids": true, "type": "domain", "uuid": "4ffb6382-edfb-4fe3-87d8-e158f0613ce4", "value": "windowsoftmessages.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:06+00:00", "timestamp": "1779886806", "to_ids": true, "type": "domain", "uuid": "d71e0f8a-c458-492a-b9ed-26dd00d4d429", "value": "windowsweatherkb.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bootkeyslotrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:06+00:00", "timestamp": "1779886807", "to_ids": true, "type": "domain", "uuid": "038c3a23-0f19-44ba-b620-378c970a1587", "value": "function.windowsoftmessages.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886807", "to_ids": false, "type": "url", "uuid": "7a29413c-b6de-47d1-92d6-9a0bb326b096", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0b2f853bb4ea05e04922aeba64e4b4c097ff8d90", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886807", "to_ids": true, "type": "domain", "uuid": "c20cb883-29b0-49d9-a870-338f69a0f44b", "value": "akamaicloud.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886807", "to_ids": true, "type": "domain", "uuid": "5e6edd73-6e62-4615-95dd-4ba5c293f841", "value": "devicelinkintel.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886807", "to_ids": true, "type": "domain", "uuid": "f046a327-04f1-45df-828c-b8a753519cac", "value": "intelcloudinsights.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886807", "to_ids": true, "type": "domain", "uuid": "61582bda-3633-419e-b409-6c048bd1cb44", "value": "msdeliverycontent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886807", "to_ids": false, "type": "url", "uuid": "381cb8ad-2765-40fa-8ab9-374965182cff", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a0e8c63979d1a4372d57a1a4e91be1e6d6729c78", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:07+00:00", "timestamp": "1779886808", "to_ids": false, "type": "url", "uuid": "40176c70-d592-4b10-a397-a1d6f756128e", "value": "https://blog.fox-it.com/2026/05/22/remotepe-the-lazarus-rat-that-lives-in-memory", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:08+00:00", "timestamp": "1779886808", "to_ids": true, "type": "domain", "uuid": "e533a43a-4faa-409c-bec4-de39537391a6", "value": "appsnabia.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:08+00:00", "timestamp": "1779886808", "to_ids": true, "type": "domain", "uuid": "d5f12d34-e635-4459-b6ab-78df910717b0", "value": "btfns.co", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:08+00:00", "timestamp": "1779886808", "to_ids": true, "type": "domain", "uuid": "a0de4e02-e1db-4a0c-a5ae-49b60e0fe495", "value": "mail.aes-secure.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:08+00:00", "timestamp": "1779886808", "to_ids": true, "type": "domain", "uuid": "13dad321-bae7-48f7-afe6-bcee52b39507", "value": "mail.newson-6.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:08+00:00", "timestamp": "1779886808", "to_ids": true, "type": "domain", "uuid": "7c3da2be-27d0-4089-a76f-693c53c1f3f5", "value": "newson-6.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:08+00:00", "timestamp": "1779886809", "to_ids": true, "type": "domain", "uuid": "ca15d417-df4a-4a01-b255-a039df1f5482", "value": "track.trandytics.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:09+00:00", "timestamp": "1779886809", "to_ids": true, "type": "domain", "uuid": "df08126c-6584-4da5-9d27-73ca2bcfea5b", "value": "trandytics.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:09+00:00", "timestamp": "1779886809", "to_ids": false, "type": "url", "uuid": "16eac03f-61dd-4bf8-ae2b-db21e332e4ec", "value": "https://api.github.com/repos/stamparm/maltrail/commits/4bd3d68483e1f536d516a2b8c9ea1b331608f532", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:09+00:00", "timestamp": "1779886809", "to_ids": false, "type": "url", "uuid": "5adbfee8-28d0-4e0b-8be9-25b6e41d4ef0", "value": "https://x.com/tdatwja/status/2059088636340314310", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:09+00:00", "timestamp": "1779886809", "to_ids": false, "type": "url", "uuid": "5528994a-5293-4be2-abe1-6b543a4580b4", "value": "https://www.virustotal.com/gui/file/4c0d1e5d7983d740d37c0c1f6bc6a4d6ecd19a77136e8f2ac26baaa4eddad0a0/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T13:00:09+00:00", "timestamp": "1779886809", "to_ids": true, "type": "domain", "uuid": "d477d383-6734-4112-8157-ab176952c7c3", "value": "calidum-oprema.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "nexus_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:05+00:00", "timestamp": "1779890405", "to_ids": false, "type": "url", "uuid": "f65d66d0-260c-47d4-a900-9d5f8078a8d9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e1dbbc3eb43c970badfe3afe77c652605e366642", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "nexus_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:05+00:00", "timestamp": "1779890405", "to_ids": true, "type": "ip-dst", "uuid": "62234798-2d8b-4b20-8413-e34283cf9286", "value": "172.86.72.239", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "nexus_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:05+00:00", "timestamp": "1779890405", "to_ids": true, "type": "ip-dst", "uuid": "6751859b-571a-4eec-90c1-9ec1dbb4efe4", "value": "45.61.134.158", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:05+00:00", "timestamp": "1779890405", "to_ids": false, "type": "url", "uuid": "6afe03db-8eef-4c26-bdce-714c6092f554", "value": "https://api.github.com/repos/stamparm/maltrail/commits/231c0017affc2b0699f569c0fed98b1eb84ace65", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:06+00:00", "timestamp": "1779890406", "to_ids": false, "type": "url", "uuid": "76733b7c-ab8f-4ae2-bb47-1d9103283d86", "value": "https://www.virustotal.com/gui/file/1ba927d47206bc6a795bee28bc8d6a9ff81cd46ac3e35c3f46dd875afdf51db1/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:06+00:00", "timestamp": "1779890406", "to_ids": true, "type": "ip-dst", "uuid": "c1bd91ea-3ce8-485a-9097-0c85fbb26d08", "value": "178.16.53.219", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:06+00:00", "timestamp": "1779890406", "to_ids": false, "type": "url", "uuid": "d386919c-2043-4476-a896-805aacf3f852", "value": "https://api.github.com/repos/stamparm/maltrail/commits/eb882df5c004e775ce874a83d41a876d45285915", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:06+00:00", "timestamp": "1779890406", "to_ids": false, "type": "url", "uuid": "948e5498-2f9c-4886-bcd7-864a850c036d", "value": "https://x.com/sdcyberresearch/status/2059613050659827852", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:06+00:00", "timestamp": "1779890406", "to_ids": true, "type": "ip-dst", "uuid": "b5f81c9d-7d78-4800-ac07-b29db4e07662", "value": "38.87.117.12", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:06+00:00", "timestamp": "1779890407", "to_ids": true, "type": "ip-dst", "uuid": "6dd6d2e6-4456-47ae-9470-64ec162999c4", "value": "45.158.127.28", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:07+00:00", "timestamp": "1779890407", "to_ids": true, "type": "domain", "uuid": "94bfc474-f414-4084-9e75-fb6d0820d84e", "value": "hilo-cdn.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:07+00:00", "timestamp": "1779890407", "to_ids": false, "type": "url", "uuid": "d6c2356a-f644-424f-a631-a8e1b37fb4c5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cd78bef1ca5a92f4cb9479ba66f4926bf3e831d7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:07+00:00", "timestamp": "1779890407", "to_ids": false, "type": "url", "uuid": "b1452dca-53cb-4507-9ddb-e58d98fb2d4e", "value": "https://x.com/joe4security/status/2059615683286089797", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:07+00:00", "timestamp": "1779890407", "to_ids": false, "type": "url", "uuid": "039b8bee-1561-4835-90de-5b4f1aed7ed1", "value": "https://www.joesandbox.com/joereverser/analysis/download/a6165a32-5017-4c81-bdd1-e7926cbd36e9?type=html", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:07+00:00", "timestamp": "1779890407", "to_ids": true, "type": "domain", "uuid": "8c668a14-cd14-4e34-89d0-3c965593485f", "value": "gadarpanal.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:07+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "43180e8f-ec81-482c-a8ea-1a4c2edec9c2", "value": "lunavots.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "895bce67-3ef8-4521-b9d8-6d264f3d391a", "value": "nexusp1.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "873ef2eb-0588-46bb-862b-55547092abdf", "value": "ngetprim.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "2f8f4114-9ceb-42db-b96b-b23bfa6bcceb", "value": "ngetsoftware.in", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "e142b19f-47a1-4679-9c97-aceb0564e6ab", "value": "nproreturnxyz.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "bce8ddbb-e71a-4638-bc28-d7b29b866dc2", "value": "paglaworlddd.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890408", "to_ids": true, "type": "domain", "uuid": "ba666a50-ee75-43b6-97ea-300f16347d14", "value": "proplus.co.in", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:08+00:00", "timestamp": "1779890409", "to_ids": true, "type": "domain", "uuid": "b601c4d2-1124-4708-bcb1-3407386b3bef", "value": "sikkav2.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:09+00:00", "timestamp": "1779890409", "to_ids": true, "type": "domain", "uuid": "af3123f9-40bd-4ce8-bb1c-d6aab391f5d5", "value": "singiskinglive.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_bankbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:09+00:00", "timestamp": "1779890409", "to_ids": true, "type": "domain", "uuid": "0994db49-6ae2-414e-852a-16b9ef91ab9f", "value": "ts-bazar.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:09+00:00", "timestamp": "1779890409", "to_ids": false, "type": "url", "uuid": "6a14d56e-d50b-4859-b2d2-d6047caaf263", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d52d365f67e24e395b985ab796f110bf32eb8910", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:09+00:00", "timestamp": "1779890409", "to_ids": false, "type": "url", "uuid": "1ed0e8f6-49d6-459b-8df9-0e5490e0ffe6", "value": "https://x.com/safedepio/status/2059618763797110846", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:09+00:00", "timestamp": "1779890409", "to_ids": false, "type": "url", "uuid": "98e38b0d-e428-481e-b0e0-8611d3969c24", "value": "https://github.com/friuns2/codex-mobile/issues/198", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:09+00:00", "timestamp": "1779890410", "to_ids": true, "type": "domain", "uuid": "4a98b0e4-f592-4126-bd86-eef71603c58f", "value": "anyclaw.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T14:00:10+00:00", "timestamp": "1779890410", "to_ids": true, "type": "domain", "uuid": "e05933c5-0272-4e94-a180-788092eb692f", "value": "sentry.anyclaw.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:04+00:00", "timestamp": "1779894004", "to_ids": false, "type": "url", "uuid": "6f7d9f2e-56e6-4616-9b5b-6cc479075ed3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/fe3c0f2c034dec860bb771bceec329c92f98892d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:04+00:00", "timestamp": "1779894004", "to_ids": true, "type": "domain", "uuid": "b22f3156-cc8f-48f0-b3b6-755c7c234ecf", "value": "allbestselling.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:04+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "b8a7778c-e432-40de-9c29-b657da236f65", "value": "bargainlenders.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "527e0a33-7e77-4490-a775-33202a94692f", "value": "cipherquantix.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "889b7084-36dd-40a7-9b8f-0d28786201ee", "value": "fishingguidesmiami.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "99d7cb51-ca13-48a6-bc9f-57b0e3c9fa1f", "value": "fluxontra.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "caefea59-1f9e-4d7d-ac3b-a2f48d8cf1d5", "value": "getetenos.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "d4b7c2f5-011b-4211-8238-711bd0cb136c", "value": "lufkintowing.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894005", "to_ids": true, "type": "domain", "uuid": "0b4edf80-4c36-45c4-bcf8-62a00f5afe2e", "value": "play-best-games.website", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:05+00:00", "timestamp": "1779894006", "to_ids": true, "type": "domain", "uuid": "442ba686-1b34-4eca-bc8c-d45a9175c3de", "value": "plumbingservicestucson.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:06+00:00", "timestamp": "1779894006", "to_ids": true, "type": "domain", "uuid": "c4f99782-a673-405f-a182-283b73e70c71", "value": "shopayse.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:06+00:00", "timestamp": "1779894006", "to_ids": false, "type": "url", "uuid": "0101b64f-3fde-43d0-9444-a6c657fa6729", "value": "https://api.github.com/repos/stamparm/maltrail/commits/2fddbab603e2959f4efa15219e7b6ff714ebb6ea", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:06+00:00", "timestamp": "1779894006", "to_ids": false, "type": "url", "uuid": "db4a0c22-bb8e-41dd-b26f-2ec91cc1aa21", "value": "https://x.com/Unit42_Intel/status/2059640356908539913", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:06+00:00", "timestamp": "1779894006", "to_ids": false, "type": "url", "uuid": "1f76cbf0-7f13-4fc8-9d3e-a887fbd62747", "value": "https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2026-05-26-IOCs-for-SHub-Stealer-activity.txt", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:06+00:00", "timestamp": "1779894006", "to_ids": true, "type": "domain", "uuid": "73799557-0a39-444b-a06d-5bbe7d76f811", "value": "qw4c12qqqqoepwq.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:06+00:00", "timestamp": "1779894006", "to_ids": true, "type": "domain", "uuid": "bc63f01c-6850-4e21-af1d-250687a22a6e", "value": "claudecontrol.github.io", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sinkhole_crowdstrike", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894007", "to_ids": false, "type": "url", "uuid": "64cb9e67-64b2-4928-b3ec-6a64956771b0", "value": "https://api.github.com/repos/stamparm/maltrail/commits/90db7c4f84db1eb0062e76a51202a19b8810e46b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sinkhole_crowdstrike", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894007", "to_ids": false, "type": "url", "uuid": "1acc4acf-6477-43ec-9e85-bbdff2c55b73", "value": "https://x.com/DFIR_Radar/status/2059349762944471511", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sinkhole_crowdstrike", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894007", "to_ids": false, "type": "url", "uuid": "97c10b29-2801-47c8-adbd-771e64b386fb", "value": "https://www.crowdstrike.com/en-us/blog/inside-crowdstrike-takedown-of-a-developer-targeting-botnet", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sinkhole_crowdstrike", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894007", "to_ids": true, "type": "ip-dst", "uuid": "9e3b33c2-6a41-461f-972f-7dea73bc1b2a", "value": "164.92.88.210", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894007", "to_ids": false, "type": "url", "uuid": "839aec79-a78a-4e22-bee1-c203d99d020c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1131851154c2f459ba434732b2403de2b5fd7e4e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894007", "to_ids": true, "type": "domain", "uuid": "22abf74d-280f-49fc-94c3-203cff08a915", "value": "txau1.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T15:00:07+00:00", "timestamp": "1779894008", "to_ids": true, "type": "domain", "uuid": "3257941f-0e98-4bb9-96f5-2f43000a6bd9", "value": "ge-kr.txau1.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:03+00:00", "timestamp": "1779904803", "to_ids": false, "type": "url", "uuid": "0025af68-a91f-4c0a-83c8-963d3bddccf8", "value": "https://api.github.com/repos/stamparm/maltrail/commits/6780ad2296c42932f019dd8aaed5c2d2514bbc15", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:03+00:00", "timestamp": "1779904803", "to_ids": false, "type": "url", "uuid": "66f0f065-fdef-4b2c-9e84-e953ac32e587", "value": "https://x.com/Malwarehunterr/status/2059679951234965551", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:03+00:00", "timestamp": "1779904803", "to_ids": true, "type": "domain", "uuid": "dbeee5e5-a2b0-4fdc-8fbc-ac975f37f858", "value": "bopm.digital", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:03+00:00", "timestamp": "1779904804", "to_ids": true, "type": "domain", "uuid": "5cbe6a41-1eeb-48d5-afdb-b0667cb6b990", "value": "eventslogon.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:04+00:00", "timestamp": "1779904804", "to_ids": true, "type": "domain", "uuid": "5d7818ca-0221-4424-a721-257ff06d58cc", "value": "gech.life", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:04+00:00", "timestamp": "1779904804", "to_ids": true, "type": "domain", "uuid": "8d0774d1-06d0-4f31-9748-837edea4b91e", "value": "liveeconnect.com.es", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:04+00:00", "timestamp": "1779904804", "to_ids": true, "type": "domain", "uuid": "55ac6e16-47c2-4c22-bde1-ec22bff0ddc5", "value": "liveeconnect.im", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:05+00:00", "timestamp": "1779904805", "to_ids": true, "type": "domain", "uuid": "4e5ae5a4-0c2d-4277-8036-2a9e36af0dfd", "value": "naturallerevestimentos.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:05+00:00", "timestamp": "1779904805", "to_ids": true, "type": "domain", "uuid": "84e9c6d5-685e-410d-8e0a-82a2a64300ca", "value": "schedulesession.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:05+00:00", "timestamp": "1779904805", "to_ids": true, "type": "domain", "uuid": "a6bb338f-64bb-4e72-ba30-884d792880d6", "value": "scsi.life", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T18:00:05+00:00", "timestamp": "1779904805", "to_ids": true, "type": "domain", "uuid": "b85d1d1d-c52a-447e-ab5a-cc73bb078b07", "value": "seupedido.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:02+00:00", "timestamp": "1779908403", "to_ids": false, "type": "url", "uuid": "08312cde-d145-4f29-a306-14cc846d60d1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ce3578894128648f7ea2c1ec3b5f16ed4a548003", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:03+00:00", "timestamp": "1779908403", "to_ids": false, "type": "url", "uuid": "1904bb9f-782f-4b9b-9f0a-36da7ffdb938", "value": "https://x.com/skocherhan/status/2059706390990483908", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:03+00:00", "timestamp": "1779908403", "to_ids": true, "type": "domain", "uuid": "25e542e1-bb06-41bf-a22c-20ddf9264287", "value": "mls1sl.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:03+00:00", "timestamp": "1779908403", "to_ids": true, "type": "domain", "uuid": "b9fa341b-07bc-4a4d-816f-01ba70600abe", "value": "moie1oc.dynu.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:03+00:00", "timestamp": "1779908403", "to_ids": true, "type": "domain", "uuid": "61c1cd30-5f66-4d96-9cfe-61fe2c8e6f7f", "value": "mois7al.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:03+00:00", "timestamp": "1779908404", "to_ids": true, "type": "domain", "uuid": "1f8d2867-f72e-40f9-badd-61f6aee3f6f2", "value": "nav-logins.nsc35tx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:04+00:00", "timestamp": "1779908404", "to_ids": true, "type": "domain", "uuid": "91efa5a2-309c-41cf-a276-8c46602ce19c", "value": "nid-login.pax38cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:04+00:00", "timestamp": "1779908404", "to_ids": true, "type": "domain", "uuid": "3871c243-1ad2-487f-aa85-c9bc883b9905", "value": "nids.ntc18xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:04+00:00", "timestamp": "1779908404", "to_ids": true, "type": "domain", "uuid": "213e6944-c962-4f8c-9fa4-85848891db27", "value": "nids.ntx2exp.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:04+00:00", "timestamp": "1779908404", "to_ids": true, "type": "domain", "uuid": "0a0e0f6f-8b16-4f9d-a4ea-b9cff0a453ea", "value": "nidservers.mls1sl.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:04+00:00", "timestamp": "1779908405", "to_ids": true, "type": "domain", "uuid": "daea082e-299a-4311-8205-2a3159eb3140", "value": "nsc0tx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:05+00:00", "timestamp": "1779908405", "to_ids": true, "type": "domain", "uuid": "a7b3697a-f0e6-49ed-8763-15c7bd312789", "value": "nsc12tx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:05+00:00", "timestamp": "1779908405", "to_ids": true, "type": "domain", "uuid": "f64a2c77-7e0f-4d51-989f-b7e8e3cc9663", "value": "nsc23tx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:05+00:00", "timestamp": "1779908405", "to_ids": true, "type": "domain", "uuid": "d9f8daf9-8fc2-43bb-b790-7456f6315a2c", "value": "nsc33tx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:05+00:00", "timestamp": "1779908405", "to_ids": true, "type": "domain", "uuid": "0b91a189-875e-43c4-89fd-c786ae1dda7f", "value": "nsc35tx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:05+00:00", "timestamp": "1779908405", "to_ids": true, "type": "domain", "uuid": "75640387-8c44-4fc5-959c-27f5c80cc83c", "value": "ntc11xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:05+00:00", "timestamp": "1779908406", "to_ids": true, "type": "domain", "uuid": "fb257489-cd8c-40b7-af99-df2b92bbb0b4", "value": "ntc13xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:06+00:00", "timestamp": "1779908406", "to_ids": true, "type": "domain", "uuid": "27547bd6-c72a-48a0-9002-1d67c9b524c7", "value": "ntc14xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:06+00:00", "timestamp": "1779908406", "to_ids": true, "type": "domain", "uuid": "25bb1b23-1988-42ff-bd6d-cd020d304d90", "value": "ntc15xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:06+00:00", "timestamp": "1779908406", "to_ids": true, "type": "domain", "uuid": "31bbd14c-ff68-4d2f-9517-a983c0f982fe", "value": "ntc16xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:06+00:00", "timestamp": "1779908406", "to_ids": true, "type": "domain", "uuid": "ce5a720f-c9d1-4011-be25-30d5d49b9c5f", "value": "ntc18xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:06+00:00", "timestamp": "1779908406", "to_ids": true, "type": "domain", "uuid": "9075dd3b-424a-40f6-a8c2-42843e385184", "value": "ntc19xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:06+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "c4b1ce50-f9aa-4dba-9298-df14ebefea6c", "value": "ntc1xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "8f5fdab0-9d98-458c-aaa8-c1c5161ebbba", "value": "ntc2xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "9278cec6-983d-42d5-beb5-03d378032741", "value": "ntc32xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "aeca4b89-927c-43d6-a428-5ca3f35562cb", "value": "ntc33xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "2663b5f7-4d61-4992-bf77-30de19a180b7", "value": "ntc35xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "6da91528-287a-420b-9525-e3862b5fdd44", "value": "ntc6xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908407", "to_ids": true, "type": "domain", "uuid": "87d51f0f-1575-4824-8e63-69bac029f986", "value": "ntc9xt.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:07+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "e598f663-2bc4-48b1-8dd4-9f59eba9f573", "value": "ntx0exp.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:08+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "bb3065c9-a39b-4999-9472-d88fa679c60c", "value": "ntx2exp.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:08+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "90b3472a-f4f8-4ebf-b001-08a4c6c67761", "value": "ntx4exp.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:08+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "0f8e9216-11a3-4ac2-9612-d8fddfdd5d85", "value": "ntx5exp.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:08+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "c4143621-b2df-41ff-8f37-d518cec5b83c", "value": "op21ntyx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:08+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "db6cf829-e317-4501-b256-183ee8d93e2f", "value": "op6ntyx.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:08+00:00", "timestamp": "1779908408", "to_ids": true, "type": "domain", "uuid": "35858246-4c02-4a5a-bd20-28123e473292", "value": "pax12cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908409", "to_ids": true, "type": "domain", "uuid": "8a3a0a4f-6250-483c-bc89-1296690fbcf2", "value": "pax17cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908409", "to_ids": true, "type": "domain", "uuid": "b5ebe7b6-8a40-4fc5-ae92-89a6161bfa74", "value": "pax19cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908409", "to_ids": true, "type": "domain", "uuid": "41c19a00-3ab7-415a-aafe-176a7554732c", "value": "pax30cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908409", "to_ids": true, "type": "domain", "uuid": "79f6cecb-4c6c-415d-ad87-e5fd49dd270a", "value": "pax31cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908409", "to_ids": true, "type": "domain", "uuid": "bdc40644-4102-4df1-8202-034ee1abf622", "value": "pax33cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908409", "to_ids": true, "type": "domain", "uuid": "c0ed0f17-47db-4b44-8ed6-693955a36623", "value": "pax34cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:09+00:00", "timestamp": "1779908410", "to_ids": true, "type": "domain", "uuid": "5f16b2c4-7485-41be-839d-feae2476f165", "value": "pax35cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:10+00:00", "timestamp": "1779908410", "to_ids": true, "type": "domain", "uuid": "5546364a-e69b-4028-9474-a1b2e76f2190", "value": "pax37cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T19:00:10+00:00", "timestamp": "1779908410", "to_ids": true, "type": "domain", "uuid": "13c9b6a4-c126-40c3-92d0-dc6b883fd6a8", "value": "pax38cs.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:03+00:00", "timestamp": "1779912003", "to_ids": false, "type": "url", "uuid": "85fbfc25-e765-40f1-8903-1c5bddb45d45", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5294a42b34dc5cee3831d17f29ea6b73d5e1d737", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:03+00:00", "timestamp": "1779912003", "to_ids": true, "type": "domain", "uuid": "e319758a-4b40-4cd0-a2a3-1b4aab0069b7", "value": "fehqgjtqkwj.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:03+00:00", "timestamp": "1779912003", "to_ids": true, "type": "domain", "uuid": "864e6af4-ac0f-44ef-9788-3fe328b8dfe0", "value": "gebgkqejglq.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:03+00:00", "timestamp": "1779912003", "to_ids": true, "type": "domain", "uuid": "30b05c57-c28c-44c8-9bfa-f0a4b35b8ff9", "value": "heowaihtj.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:04+00:00", "timestamp": "1779912004", "to_ids": false, "type": "url", "uuid": "15da88d4-4ebf-40a3-a5ed-14fbd4eb8445", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f0ca503d83efe31b2b65677ccce39d154cff9163", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:04+00:00", "timestamp": "1779912004", "to_ids": true, "type": "domain", "uuid": "503263af-530e-4f8b-b297-ccde70eb3c4a", "value": "bdbsxxxx.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:04+00:00", "timestamp": "1779912004", "to_ids": true, "type": "domain", "uuid": "86e8df28-39a2-4385-97c8-955b3630c2a0", "value": "bn-3nt-26t.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:04+00:00", "timestamp": "1779912004", "to_ids": true, "type": "domain", "uuid": "1d5a52d6-6fd6-4bb8-bc9d-0ee611bbcb1b", "value": "fg435y.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:04+00:00", "timestamp": "1779912004", "to_ids": true, "type": "domain", "uuid": "73c65e4c-21a3-4032-b7b7-10576965479e", "value": "gbmq-mag-1b3l.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912005", "to_ids": true, "type": "domain", "uuid": "35112e06-4d52-4a55-bc0b-95f1a87506b6", "value": "hewh-dh.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912005", "to_ids": true, "type": "domain", "uuid": "e2020c09-0ab2-4997-b7fd-b673d41824cb", "value": "hnfsdhreh.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912005", "to_ids": true, "type": "domain", "uuid": "af14fecf-59c2-41a3-9208-4abf3de87d31", "value": "hrb-hrjd-dn.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912005", "to_ids": true, "type": "domain", "uuid": "06c4a8ae-3862-4f70-bbd8-377034858bb1", "value": "hw-dsgqeh-f.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912005", "to_ids": true, "type": "domain", "uuid": "df443fb0-f3c6-4219-a39e-c3d7972ea4db", "value": "j26hrkl-268yuh.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912005", "to_ids": true, "type": "domain", "uuid": "85abb06f-820c-4ccd-a4f5-fad440f417e4", "value": "nbt-sngq-ebn-5.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:05+00:00", "timestamp": "1779912006", "to_ids": true, "type": "domain", "uuid": "c7085f06-22c7-4d72-aabd-d0a804b9be1f", "value": "nfgher.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912006", "to_ids": true, "type": "domain", "uuid": "568b4388-29e0-4538-a52d-caeb211638d6", "value": "nga-dge.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912006", "to_ids": true, "type": "domain", "uuid": "5f4526b7-b43c-4bb4-b141-26e5cf9480f2", "value": "ngdjk-628yuh.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912006", "to_ids": true, "type": "domain", "uuid": "27012c11-809e-44e0-9b64-91b6ed48d63b", "value": "ngdjwg-09-113.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912006", "to_ids": true, "type": "domain", "uuid": "077c6808-b18a-4a2c-b00c-0c521dead748", "value": "ngsfjaeru2.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912006", "to_ids": true, "type": "domain", "uuid": "d9d5af0b-c59a-4bbc-b8fb-4c512812e8c0", "value": "sdfsdfsdfs.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912006", "to_ids": false, "type": "url", "uuid": "5cc077c6-9f66-494a-8349-f8621a8af7fc", "value": "https://api.github.com/repos/stamparm/maltrail/commits/05dd11a9fecac8b7fbcab9d0e7cc27c0667f277b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:06+00:00", "timestamp": "1779912007", "to_ids": false, "type": "url", "uuid": "5c2c9ca8-fef5-472a-8b3d-cb58c52561e6", "value": "https://github.com/hagezi/dns-blocklists/issues/10316", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:07+00:00", "timestamp": "1779912007", "to_ids": true, "type": "domain", "uuid": "6db363f1-e7ad-4ca6-8a8f-75ff8626f891", "value": "fregherwqewr5.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:07+00:00", "timestamp": "1779912007", "to_ids": true, "type": "domain", "uuid": "0a81dd53-f58b-4adb-a430-0e0d11cc080e", "value": "otyuyre3.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-27T20:00:07+00:00", "timestamp": "1779912007", "to_ids": true, "type": "domain", "uuid": "3232e2b8-89a7-42e7-9965-f9796004c484", "value": "rhtwyu34.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }