{ "Event": { "analysis": "1", "date": "2026-05-28", "extends_uuid": "", "info": "Maltrail IOC for 2026-05-29", "publish_timestamp": "1780092010", "published": true, "threat_level_id": "2", "timestamp": "1780092009", "uuid": "a03acbf1-881f-4cb3-884b-360fa93e141e", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "hacked_pypirepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:05+00:00", "timestamp": "1780041605", "to_ids": false, "type": "url", "uuid": "57863ef6-09f3-444d-a989-f9ee0b56f23c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/fc6806078742d6b94361a6ba095401bd30ea02ab", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_pypirepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:05+00:00", "timestamp": "1780041605", "to_ids": false, "type": "url", "uuid": "98038751-ce34-4647-bae0-e9fa19cc76d2", "value": "https://x.com/TekDefense/status/2060075053769720156", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_pypirepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:05+00:00", "timestamp": "1780041605", "to_ids": false, "type": "url", "uuid": "201872f2-2962-4393-86a6-544bbb08d945", "value": "https://sandyclaw.permiso.io/shared/dcpgKUGkdIoQB6ofXHOWNsoe51Koohh0GDXkU0xD9Dg#network-activity", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_pypirepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:05+00:00", "timestamp": "1780041605", "to_ids": true, "type": "domain", "uuid": "94b179d9-ab6c-4a96-b9ca-8e7141c9c109", "value": "aab.sportsontheweb.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:05+00:00", "timestamp": "1780041606", "to_ids": false, "type": "url", "uuid": "1bb0d0c8-b2be-43f3-b81f-7c810729c5a6", "value": "https://api.github.com/repos/stamparm/maltrail/commits/29f7f352025526cc1b3f4c7cca002ef599ff7f52", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:06+00:00", "timestamp": "1780041606", "to_ids": false, "type": "url", "uuid": "13d75119-7849-45f4-b49c-3e620f046f5d", "value": "https://x.com/skocherhan/status/2060069310840844770", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:06+00:00", "timestamp": "1780041606", "to_ids": true, "type": "domain", "uuid": "7c1d1622-e6ca-4a9f-bcb0-cbf3e625d209", "value": "0t3ofn4r21.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:06+00:00", "timestamp": "1780041606", "to_ids": true, "type": "domain", "uuid": "7c7c3f8e-cfcd-4eaa-bf59-bb4be69eeb2e", "value": "41mhzh442tc.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:06+00:00", "timestamp": "1780041606", "to_ids": true, "type": "domain", "uuid": "eb7a49c5-fd23-474d-920b-c5c93fe2f966", "value": "46fy9m5lc2.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:06+00:00", "timestamp": "1780041606", "to_ids": true, "type": "domain", "uuid": "ee5b8fac-a103-465a-ad2a-626e9a742626", "value": "4x97qnzirrl.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:06+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "1e56bfff-eb09-48b7-98be-a260673cdf9a", "value": "52f6qb4jai.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:07+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "02f9315a-1945-48fd-a2fb-292253bb6f7d", "value": "c4f0rhn5qdp.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:07+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "968ab60a-4985-4a6b-bfa6-cea631c8e400", "value": "dns.reward.freeddns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:07+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "49c030ab-d689-48be-ae8f-dda379aa8bd5", "value": "nusetx.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:07+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "a96d4058-531b-4ac4-98fb-b6ac8da2247d", "value": "ooolde0khlq.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:07+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "92eb356b-ea8a-42b2-b789-f8b1206a87da", "value": "reward.freeddns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:07+00:00", "timestamp": "1780041607", "to_ids": true, "type": "domain", "uuid": "1427d232-4ec2-45b5-896d-27f2b120f5e6", "value": "rffiuystub.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041608", "to_ids": true, "type": "domain", "uuid": "e401226c-a917-417c-867b-a092496acfad", "value": "zalcjrft0zv.dns.navy", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041608", "to_ids": false, "type": "url", "uuid": "f92c0fcf-7bdf-4df0-9e61-e3b9844d188f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cb8e25da30ac6b2d394e9cf53c79b54e957c91c6", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041608", "to_ids": false, "type": "url", "uuid": "409f7a2d-35f6-4a3b-8724-346dbd5208fe", "value": "https://x.com/patialavii/status/2060198653751640208", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041608", "to_ids": true, "type": "domain", "uuid": "bd339562-da42-4338-878c-92dbf6adeffe", "value": "zom-6ep.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041608", "to_ids": false, "type": "url", "uuid": "5863f20b-e65a-45fb-9f5f-ce9593d8a5a3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/88d3624a770f67f54723cc718b3f680be419b056", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041608", "to_ids": true, "type": "domain", "uuid": "15865f87-6606-4287-9c9b-41fb1f734cc8", "value": "31q1gqglqrqi5blzyi269rf0d02ex0.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:08+00:00", "timestamp": "1780041609", "to_ids": true, "type": "domain", "uuid": "4324884a-e539-4568-84ea-dde329082501", "value": "747aqkwvpmipxaag7fwsilshk9y6ch.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:09+00:00", "timestamp": "1780041609", "to_ids": true, "type": "domain", "uuid": "921c07fc-acfd-4a2e-830f-9966af890fee", "value": "lejqhwd0odw1kig0t8k7cg87yfy4f9.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:09+00:00", "timestamp": "1780041609", "to_ids": false, "type": "url", "uuid": "a212328a-a978-4f0d-9066-d40f87d53081", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5f2e973d2690b652afc9bdb96c09a5f03357e5fb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:09+00:00", "timestamp": "1780041609", "to_ids": false, "type": "url", "uuid": "7acd4e90-fd8b-4728-8f6b-90507269cb15", "value": "https://x.com/masaomi346/status/2060149098226057266", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:09+00:00", "timestamp": "1780041609", "to_ids": true, "type": "domain", "uuid": "da85f5e6-715c-416c-9f76-8e3a5175eb3f", "value": "blueprintmesh.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:09+00:00", "timestamp": "1780041609", "to_ids": false, "type": "url", "uuid": "0fad3601-08a2-4446-9c55-88a1140da9d1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3ba6014651c2be06ef56a0c0e87b5df11627ad20", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:09+00:00", "timestamp": "1780041609", "to_ids": false, "type": "url", "uuid": "dc113f54-4bc1-4082-a9b9-2995f429a755", "value": "https://www.enki.co.kr/en/media-center/blog/kimsuky-s-advanced-attack-techniques-jsonping-webex-spoofing-and-a-new-httpspy-variant", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:10+00:00", "timestamp": "1780041610", "to_ids": true, "type": "domain", "uuid": "9cbd35cd-baed-48f9-bc5c-5f386ca81327", "value": "bigfile.crabdance.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:10+00:00", "timestamp": "1780041610", "to_ids": true, "type": "domain", "uuid": "1c1bd669-711d-473b-a13a-36c920fb3ab4", "value": "conference.birdriver.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T08:00:10+00:00", "timestamp": "1780041610", "to_ids": true, "type": "domain", "uuid": "1237fdfd-d5f1-4a7a-9467-3c4b45825a13", "value": "hdrgdrfes.chickenkiller.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T17:00:02+00:00", "timestamp": "1780074002", "to_ids": false, "type": "url", "uuid": "49de21bf-8b54-4771-b20f-a5045c5bc785", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b4c83f2cce815921c64340f76cc224a541d5be45", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T17:00:03+00:00", "timestamp": "1780074003", "to_ids": false, "type": "url", "uuid": "0acf8b7a-66cc-4ab9-b5b3-3a2516091b6c", "value": "https://adelnz.com/writing/npm-install-is-dangerous", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T17:00:03+00:00", "timestamp": "1780074003", "to_ids": true, "type": "domain", "uuid": "05ecb359-49d6-469b-9b48-b1523bd58133", "value": "novachainhub.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:03+00:00", "timestamp": "1780077604", "to_ids": false, "type": "url", "uuid": "b3d2add2-531f-4dc4-b8fa-4706ac1bcdaa", "value": "https://api.github.com/repos/stamparm/maltrail/commits/24d9ced854bd566b4fa6173e9c1e2301b8e6fefc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:04+00:00", "timestamp": "1780077605", "to_ids": false, "type": "url", "uuid": "fecf93c0-2cd7-453c-a988-7bc09e02e6bb", "value": "https://x.com/L0Psec/status/2060365751073075271", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:05+00:00", "timestamp": "1780077605", "to_ids": false, "type": "url", "uuid": "dcdc5aed-2062-44f7-954a-f2515e2f9f18", "value": "https://www.virustotal.com/gui/file/8145a7920d69ee42e12533f5ef8d5e1168cd574db3586cb30af82f54c66d2f1d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:05+00:00", "timestamp": "1780077605", "to_ids": true, "type": "domain", "uuid": "a541a4b1-ef36-418d-ab5e-0f67fe68621c", "value": "boostamber7.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:05+00:00", "timestamp": "1780077606", "to_ids": false, "type": "url", "uuid": "2ae500b3-1b24-4777-a500-b20989217429", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c6f8389e3cb87878318e0a3cef6c382c31aa22b9", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:06+00:00", "timestamp": "1780077606", "to_ids": true, "type": "ip-dst", "uuid": "b329db1a-5ab3-4716-860c-df64576a908a", "value": "136.243.22.62", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:06+00:00", "timestamp": "1780077606", "to_ids": true, "type": "ip-dst", "uuid": "a53b9930-2601-4215-99f1-4b3152eb4295", "value": "138.201.128.169", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:06+00:00", "timestamp": "1780077606", "to_ids": false, "type": "url", "uuid": "ca9a2a9b-0544-4c79-a054-0aa0c94cdbfc", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b79e1b0840022c10bbd9ceee8cef592208d5bb5e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:06+00:00", "timestamp": "1780077606", "to_ids": false, "type": "url", "uuid": "e452eb86-98ad-49f9-bd79-5bb920242121", "value": "https://x.com/malwrhunterteam/status/2060297882582855769", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:06+00:00", "timestamp": "1780077607", "to_ids": false, "type": "url", "uuid": "191d8eb6-940e-4a06-b5b0-5cc8f0b8e868", "value": "https://www.virustotal.com/gui/file/07564bc409584996628a751dd7d25c19f245fce530f79674e410278fba108fc3/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:07+00:00", "timestamp": "1780077607", "to_ids": false, "type": "url", "uuid": "5f77a893-e900-469c-aacb-9c9ed87c0ee4", "value": "https://www.virustotal.com/gui/file/4f49d84d039ee9687246c94f710461f94a7080d92498edc8023ee0aeee458a44/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:07+00:00", "timestamp": "1780077607", "to_ids": false, "type": "url", "uuid": "db0daa99-0a90-4adc-9e96-90e52d0923d6", "value": "https://www.virustotal.com/gui/file/fc3e6c28e89c9c3e6471768c78792b63cef1bea0d9691dacabe6459270ba93c1/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:07+00:00", "timestamp": "1780077607", "to_ids": false, "type": "url", "uuid": "4bb765a5-d45e-4dfd-8551-1419c9fc5849", "value": "https://www.virustotal.com/gui/file/0bc5af6638aea222d44c94653149964d10dcfcbd81fddc44d319504d39f475c9/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:07+00:00", "timestamp": "1780077607", "to_ids": true, "type": "domain", "uuid": "8cf4d7ba-4e67-41ff-b8ec-f3789637e627", "value": "ar-75823.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:07+00:00", "timestamp": "1780077607", "to_ids": true, "type": "domain", "uuid": "28c40750-b9c5-4c73-9c52-6582bee1f474", "value": "fbvendas.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:07+00:00", "timestamp": "1780077608", "to_ids": true, "type": "domain", "uuid": "44d967c3-2255-46c1-ac85-a8aa6b972ccb", "value": "trumptowin.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077608", "to_ids": true, "type": "domain", "uuid": "a2042a5a-8109-43ed-a169-fa7b8db4194d", "value": "turbo88ml.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077608", "to_ids": true, "type": "domain", "uuid": "15a91106-ea35-470a-9658-8a6a44dabc6a", "value": "cyy.fbvendas.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077608", "to_ids": true, "type": "domain", "uuid": "4988884e-f6de-4313-870b-3afc48caada4", "value": "cyy.turbo88ml.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077608", "to_ids": false, "type": "url", "uuid": "b266dfb5-0c24-460c-8a4a-37afb6ef9137", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1674be7bef63913e8f5052367fb66236cec10901", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077608", "to_ids": true, "type": "domain", "uuid": "a54d10d0-997c-49ff-a0aa-e96bf053e47f", "value": "analyzicai.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077608", "to_ids": true, "type": "domain", "uuid": "1a780bb3-6966-46c3-8c8c-2fe6f4bb0f26", "value": "solidicai.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:08+00:00", "timestamp": "1780077609", "to_ids": true, "type": "domain", "uuid": "3a36aab7-4576-42c4-b281-411bec2f2319", "value": "uxicai.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T18:00:09+00:00", "timestamp": "1780077609", "to_ids": true, "type": "domain", "uuid": "7e424b73-4790-49d8-9fc5-697d73f24dbe", "value": "web3web4.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:02+00:00", "timestamp": "1780088403", "to_ids": false, "type": "url", "uuid": "fb698581-f16a-406b-ae23-8d20a4c1f519", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d7ce0d64a953cf343953c50ea8243d339b9ee59d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:03+00:00", "timestamp": "1780088403", "to_ids": true, "type": "domain", "uuid": "3afdc361-910b-466d-922e-5e6ebda54166", "value": "aetna-9zb.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:03+00:00", "timestamp": "1780088403", "to_ids": true, "type": "domain", "uuid": "9d840ef6-f42f-44fd-a6e7-dd99fd532a77", "value": "bonus-distribution.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:03+00:00", "timestamp": "1780088403", "to_ids": true, "type": "domain", "uuid": "6dc113eb-81ec-41b2-a440-2df71f5ebdde", "value": "bot.mstoolkit.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:03+00:00", "timestamp": "1780088403", "to_ids": true, "type": "domain", "uuid": "bd9977df-6e0c-4a46-85ea-437f6c896337", "value": "curtainbeatdisturbance.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:03+00:00", "timestamp": "1780088404", "to_ids": true, "type": "domain", "uuid": "a93afd4a-1e2a-4ef0-a2b0-5566236cec2f", "value": "downloading.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:04+00:00", "timestamp": "1780088404", "to_ids": true, "type": "domain", "uuid": "5bba7458-08d9-4287-989c-7f6229e22c51", "value": "drive-zoom.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:04+00:00", "timestamp": "1780088404", "to_ids": true, "type": "domain", "uuid": "b6652957-8cbc-405e-925d-195b1cdf834d", "value": "gustavodev.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:04+00:00", "timestamp": "1780088404", "to_ids": true, "type": "domain", "uuid": "009bbf12-734b-4e77-b4a9-9d58d2c8f48d", "value": "huikf.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:04+00:00", "timestamp": "1780088404", "to_ids": true, "type": "domain", "uuid": "941a7d2a-01c7-4a6a-97ed-36b6c4b23b3d", "value": "inglesnativo.eu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:04+00:00", "timestamp": "1780088405", "to_ids": true, "type": "domain", "uuid": "5cfd2d89-3779-40db-bdec-781c3d858fbb", "value": "join-group-error8371079.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:05+00:00", "timestamp": "1780088405", "to_ids": true, "type": "domain", "uuid": "e57c4262-cdc1-4ebe-8666-7edecc4f9305", "value": "meet.inglesnativo.eu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:05+00:00", "timestamp": "1780088405", "to_ids": true, "type": "domain", "uuid": "05ba038c-0c6f-40d9-a154-cc6edf2c0ec5", "value": "meetnathan.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:05+00:00", "timestamp": "1780088405", "to_ids": true, "type": "domain", "uuid": "0c425f4c-1ac1-45b2-b85f-f37ec179caed", "value": "mstoolkit.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:05+00:00", "timestamp": "1780088405", "to_ids": true, "type": "domain", "uuid": "c9a4ece3-cbbc-4794-affd-4936a89c5f35", "value": "r20rs6net.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:05+00:00", "timestamp": "1780088405", "to_ids": true, "type": "domain", "uuid": "9e400f9d-e3c1-4c6e-8276-9979cb9b9005", "value": "school-6gw.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:05+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "ba12004a-f336-4d68-b258-f1f00a93dd5a", "value": "smskenya.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "6ff7e359-8601-4407-a481-17629b2b6c7c", "value": "test-1nh.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "8dd77cfd-5c54-46c9-a54c-1dea4e3e743e", "value": "us02webapp.drive-zoom.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "a62f3a01-9eaf-421b-8718-fda239de0a58", "value": "us04web-zoom-workspace9786677402028402.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "b8fc4888-88c4-4ff7-bc03-f7dccd62c81b", "value": "us34web.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "5b03cfc1-c3d0-4416-8280-40be04b4854f", "value": "webn-aag.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088406", "to_ids": true, "type": "domain", "uuid": "d0bd7e85-d514-4b33-a2a0-dcefa1f9ffaa", "value": "wienfraud.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:06+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "730082a4-76ff-42a7-ae24-e5b3ee01bdd7", "value": "workspace-meet10329438572942038477364299134702.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "1475ff4e-5b21-4ae7-8af8-35a7d340824c", "value": "workspace-meeting102849029377402028402.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "250812d9-e7df-4f17-a7b9-b53e93f01db7", "value": "xrob9.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "57ef763a-5c37-45bc-8f53-42fa0c1a7f29", "value": "your-invitation.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "f61b885c-3003-4ac8-87d9-1d2f51003c0a", "value": "zom.vcmll.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "015ade1e-b421-4b61-810c-0f414021b8de", "value": "zoom-videomeetings.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088407", "to_ids": true, "type": "domain", "uuid": "9965cdd8-d25e-43fe-93cc-d847e10e25d7", "value": "zoom.downloading.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:07+00:00", "timestamp": "1780088408", "to_ids": true, "type": "domain", "uuid": "ce3cf159-02cf-4f7b-b451-6316ad94b9a3", "value": "zoom.emocaptcha.us", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:08+00:00", "timestamp": "1780088408", "to_ids": true, "type": "domain", "uuid": "7873a06a-556b-4f15-9a9c-1ec5b7a72054", "value": "zoom.ro.ee", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:08+00:00", "timestamp": "1780088408", "to_ids": true, "type": "domain", "uuid": "407d0f5e-66ad-4eda-ab5a-8c5cc322b5d2", "value": "zoom.us34web.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:08+00:00", "timestamp": "1780088408", "to_ids": true, "type": "domain", "uuid": "706321e1-3641-4e8c-9bdd-32e617265995", "value": "zoominvitationsetup.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T21:00:08+00:00", "timestamp": "1780088408", "to_ids": true, "type": "domain", "uuid": "ebcad7de-3a24-4645-8696-1a4e4f5187b3", "value": "zoommeetings.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:05+00:00", "timestamp": "1780092005", "to_ids": false, "type": "url", "uuid": "4043d758-5529-43b2-a7da-b5941d4cd71f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/abe0edc92f6379400fb284d86f81c93fd31d6379", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:05+00:00", "timestamp": "1780092005", "to_ids": true, "type": "ip-dst", "uuid": "60c8586a-4a41-4b46-8342-8592f3085c2c", "value": "146.103.126.127", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:06+00:00", "timestamp": "1780092006", "to_ids": false, "type": "url", "uuid": "07ea03df-8b18-41f5-9e60-31fa512d4a5c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/00a0babd1592e6b7091600fc80395966d50d085c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:06+00:00", "timestamp": "1780092006", "to_ids": true, "type": "ip-dst", "uuid": "68e52616-028a-45d0-94c6-7e980dd716e7", "value": "156.245.246.82", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:06+00:00", "timestamp": "1780092006", "to_ids": false, "type": "url", "uuid": "c2207cd8-ae76-4534-b1b7-5b37c8564339", "value": "https://api.github.com/repos/stamparm/maltrail/commits/64a4c87351b36eb02b4e5e01df1c05ca4574f8ef", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:06+00:00", "timestamp": "1780092006", "to_ids": true, "type": "domain", "uuid": "c764c666-fa86-4b87-a4f6-73a5a641cae7", "value": "chauviu.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:06+00:00", "timestamp": "1780092006", "to_ids": true, "type": "domain", "uuid": "acece9f0-dd24-4515-83be-ffa4665b80a6", "value": "kerluku.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_landupdate808", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:06+00:00", "timestamp": "1780092007", "to_ids": true, "type": "domain", "uuid": "52185612-cd5e-4239-90b3-7f0f4e089925", "value": "pottoer.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:07+00:00", "timestamp": "1780092007", "to_ids": false, "type": "url", "uuid": "505bace6-e354-4e57-9c02-76b350323298", "value": "https://api.github.com/repos/stamparm/maltrail/commits/31d5f1f33e60aa3567eff1c255b046b5d017028b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:07+00:00", "timestamp": "1780092007", "to_ids": false, "type": "url", "uuid": "cb1ceb40-09cb-4e38-afaf-33fda2febdad", "value": "https://www.virustotal.com/gui/ip-address/2.27.5.219/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:07+00:00", "timestamp": "1780092007", "to_ids": true, "type": "domain", "uuid": "6e803938-ef10-4abb-a5a2-a636529df5f0", "value": "castrkq.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:07+00:00", "timestamp": "1780092007", "to_ids": true, "type": "domain", "uuid": "8cc4e961-2462-4231-bdb6-c4d69e2563ce", "value": "genusim.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:07+00:00", "timestamp": "1780092007", "to_ids": true, "type": "domain", "uuid": "96eb4c84-3352-4f96-890d-1ff113ded2f3", "value": "seasoem.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:07+00:00", "timestamp": "1780092008", "to_ids": false, "type": "url", "uuid": "575c3416-9d58-47e3-ac19-a70565f5bbda", "value": "https://api.github.com/repos/stamparm/maltrail/commits/56df2b032f4eb3cfe15e99a68987b98706baece1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092008", "to_ids": true, "type": "domain", "uuid": "1b070b4a-c7c5-42a9-92ac-fdb7c7b9fe94", "value": "hdcak.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092008", "to_ids": true, "type": "domain", "uuid": "d84ecf3a-f2c1-469e-bf04-ee4d88c9bbe0", "value": "pdfjpg.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092008", "to_ids": true, "type": "domain", "uuid": "6a8aaba1-f507-4478-a3e0-b73fde4c3937", "value": "weetb.help", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092008", "to_ids": false, "type": "url", "uuid": "d244eaeb-7a85-40d2-82c3-7b4222120a2c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a5ed5559589dfb7548974632241ba83660dfc2c4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092008", "to_ids": false, "type": "url", "uuid": "b2106453-f37f-47ba-9883-0845b8894ce9", "value": "https://www.virustotal.com/gui/file/c6a6e90abd5b853913bc7a970733f5098ba70f17a286cb9417034aa370246f04/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "darkgate", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092008", "to_ids": true, "type": "domain", "uuid": "2a60a3b5-55e4-4665-a501-4c9eb1fac07d", "value": "datasyncllc.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sliver", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:08+00:00", "timestamp": "1780092009", "to_ids": false, "type": "url", "uuid": "4955302b-c0e3-49d3-adf0-e27bc6bfb36a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5bc8ce646bd3f8fb87e23eddabca6253df43ddea", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sliver", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:09+00:00", "timestamp": "1780092009", "to_ids": false, "type": "url", "uuid": "3692452c-d0b1-4a10-8759-a41d4ca991f0", "value": "https://www.virustotal.com/gui/ip-address/178.16.55.10/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sliver", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:09+00:00", "timestamp": "1780092009", "to_ids": false, "type": "url", "uuid": "68dbc2de-3d44-4dda-87b8-5a3df086f98c", "value": "https://www.virustotal.com/gui/file/34db59b663c15cd03cdd92bf24bdff25b756dd51f0540fecaac2a0cab47480ae/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sliver", "deleted": false, "disable_correlation": false, "last_seen": "2026-05-29T22:00:09+00:00", "timestamp": "1780092009", "to_ids": true, "type": "domain", "uuid": "bcf0de8a-d778-4bf1-8606-f518abcfed15", "value": "binance-bnb.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }