{ "Event": { "analysis": "1", "date": "2026-02-24", "extends_uuid": "", "info": "Maltrail IOC for 2026-02-24", "publish_timestamp": "1771974002", "published": true, "threat_level_id": "2", "timestamp": "1771966807", "uuid": "b0a9ddc2-de1c-49cb-a8b5-2cd8803e7c35", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T08:00:02+00:00", "timestamp": "1771920003", "to_ids": false, "type": "url", "uuid": "20c328ed-1dde-4a26-8a89-9db9bb7daf4f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e53c50beda89b027b090eed0a98c9445a08327ce", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T08:00:03+00:00", "timestamp": "1771920004", "to_ids": true, "type": "ip-dst", "uuid": "3234ea4b-4065-422e-957d-98ba8a40966a", "value": "151.241.154.119", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T08:00:04+00:00", "timestamp": "1771920005", "to_ids": false, "type": "url", "uuid": "d64fd3ba-11ab-43bf-a3fc-55f5083830be", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d4716f94d5df29aefb74947468dbd0c4bd0996fc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T08:00:05+00:00", "timestamp": "1771920005", "to_ids": true, "type": "domain", "uuid": "d06ae70c-3195-4083-9980-3013b773a6fc", "value": "tered.pw", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T08:00:05+00:00", "timestamp": "1771920005", "to_ids": false, "type": "url", "uuid": "89c71c36-0ac6-4c08-a50e-56646cb0a223", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1060b34b043498957ee8024d00fb38fa8d4a119f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T08:00:05+00:00", "timestamp": "1771920006", "to_ids": true, "type": "domain", "uuid": "d1d6b912-4d47-4fc2-acfd-fc010264fa6a", "value": "rvtoolc.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:06+00:00", "timestamp": "1771923606", "to_ids": false, "type": "url", "uuid": "5361437c-197b-4bcb-86fe-40d2fee1f388", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8f99fa593c921ab847d4a87ed524e4cb4546d486", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:06+00:00", "timestamp": "1771923606", "to_ids": true, "type": "domain", "uuid": "bc0db2e8-158c-4876-a1e8-d88f903b4efd", "value": "rvtooli.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:06+00:00", "timestamp": "1771923606", "to_ids": false, "type": "url", "uuid": "25d3b16f-b42f-4521-97c4-9adc8ec5246a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5678302f8a5a9f8db722fd68c4378ea5b5fe497f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:06+00:00", "timestamp": "1771923606", "to_ids": true, "type": "domain", "uuid": "e589b118-db50-4361-a17a-1489a618c042", "value": "account.booklngg.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:06+00:00", "timestamp": "1771923607", "to_ids": true, "type": "domain", "uuid": "d3d3c9a9-c000-4b0d-abf8-7aac8d9095da", "value": "booklngg.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:07+00:00", "timestamp": "1771923607", "to_ids": true, "type": "domain", "uuid": "4dae6044-f157-43e2-b7d7-3b2e7307ca5e", "value": "nightlywallet.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:07+00:00", "timestamp": "1771923607", "to_ids": true, "type": "domain", "uuid": "885583e2-dc34-4f5c-98c6-f64759c04810", "value": "59xgjeq2.hexalink.digital", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:07+00:00", "timestamp": "1771923607", "to_ids": true, "type": "domain", "uuid": "13880b21-5d78-4b79-8392-e3695b2aa8f7", "value": "best.deals.my.id", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:07+00:00", "timestamp": "1771923607", "to_ids": true, "type": "domain", "uuid": "2cd0cde1-a8df-44cb-ac0b-49d3821061d3", "value": "brandnew.deals.my.id", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:07+00:00", "timestamp": "1771923607", "to_ids": true, "type": "domain", "uuid": "c11b3d0f-bef0-4445-b386-9df23f708a93", "value": "buycheap.deals.my.id", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:07+00:00", "timestamp": "1771923608", "to_ids": true, "type": "domain", "uuid": "4309e92e-9fd1-4ca8-bad6-e3ea767572df", "value": "cheapest.deals.my.id", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:08+00:00", "timestamp": "1771923608", "to_ids": true, "type": "domain", "uuid": "c5861109-66fc-412c-a130-4eebd87f1f40", "value": "deals.my.id", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:08+00:00", "timestamp": "1771923608", "to_ids": true, "type": "domain", "uuid": "c633d56e-2cb4-4e05-9a48-13c9c7138b05", "value": "hexalink.digital", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:08+00:00", "timestamp": "1771923608", "to_ids": false, "type": "url", "uuid": "5330278f-424f-4da4-bf45-f057abd2343b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/daf13720da4344b799ac1bce73959a260ce00a8a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:08+00:00", "timestamp": "1771923608", "to_ids": true, "type": "domain", "uuid": "3b3d6645-badc-422d-8cf1-98150b97a45c", "value": "filecloudgrid.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:08+00:00", "timestamp": "1771923609", "to_ids": true, "type": "domain", "uuid": "bfa686d2-968d-4acf-99d8-66ddfcff29f8", "value": "filecloudzip.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:09+00:00", "timestamp": "1771923609", "to_ids": true, "type": "domain", "uuid": "29fe98b1-7bb0-4e62-8db6-e3a785c3f90b", "value": "filedrivenow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:09+00:00", "timestamp": "1771923609", "to_ids": true, "type": "domain", "uuid": "6c91956d-a71d-4e25-aa0e-f3d81c569971", "value": "filesharegrid.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:09+00:00", "timestamp": "1771923609", "to_ids": true, "type": "domain", "uuid": "6475ab2d-9f66-43bc-9f7d-1f675f09520e", "value": "media.megafilehost.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:09+00:00", "timestamp": "1771923609", "to_ids": true, "type": "domain", "uuid": "42fb13e3-8386-4909-9de2-69cdf0a02d9c", "value": "megafilehost.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:09+00:00", "timestamp": "1771923609", "to_ids": true, "type": "domain", "uuid": "39b84053-2d4c-4759-a2ae-84562b3b959f", "value": "megafilehost.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:09+00:00", "timestamp": "1771923610", "to_ids": false, "type": "url", "uuid": "d407b3e6-8ddc-4670-bb02-ba01c0c7b414", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ade51ff5ba6b3ab47046f82970e5cef3a0b4bda4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:10+00:00", "timestamp": "1771923610", "to_ids": false, "type": "url", "uuid": "1aca6ae3-26a0-4ba9-a814-09e74e132d04", "value": "https://www.virustotal.com/gui/file/5b2977786f032de4a260fe264d36e4a959927e07d558eff259679afc71e87350/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:10+00:00", "timestamp": "1771923610", "to_ids": true, "type": "domain", "uuid": "6f03836b-7f20-4bf9-b982-0c566955d936", "value": "dc.aartzz.pp.ua", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:10+00:00", "timestamp": "1771923610", "to_ids": false, "type": "url", "uuid": "20ad3a45-b761-47c2-9538-2c10738ccddc", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c035cfbce3585cd0fdbbca5aa53e8f1a752de647", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:10+00:00", "timestamp": "1771923610", "to_ids": true, "type": "domain", "uuid": "65963a60-90b6-4914-b533-279e5f926852", "value": "demo.ntl-rto.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:10+00:00", "timestamp": "1771923610", "to_ids": true, "type": "domain", "uuid": "66ce304a-e8a0-4b2e-b7f5-1386607454d1", "value": "smscup.ir", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:10+00:00", "timestamp": "1771923611", "to_ids": false, "type": "url", "uuid": "265cde7a-7e0c-49c3-a4af-cc3e4c2012a1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b282cf463fb1fb9eca272d304565e5df86876a12", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:11+00:00", "timestamp": "1771923611", "to_ids": true, "type": "domain", "uuid": "69990b7b-ae77-4a04-9cd9-b141b109f65c", "value": "shift4internal.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:11+00:00", "timestamp": "1771923611", "to_ids": false, "type": "url", "uuid": "128f229a-726a-4256-9e31-afd2b1cf9452", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d64a7b76f2a61b088b8e0a986367f1c19c1f2652", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:11+00:00", "timestamp": "1771923611", "to_ids": true, "type": "domain", "uuid": "efec6997-532b-45f0-8856-d0f9c67de4d1", "value": "chromium-report-tech-331as-2s1-tcd-h143.chartexaapp-razv.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:11+00:00", "timestamp": "1771923611", "to_ids": false, "type": "url", "uuid": "8380504a-e854-4c98-ba08-dcc63e183585", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3d5b8ecc53c8caa045e2d00448c6cdd4b9c8cbcc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:11+00:00", "timestamp": "1771923611", "to_ids": false, "type": "url", "uuid": "f86ac8fb-c14d-4455-bd24-c0ffc7bd92b8", "value": "https://www.virustotal.com/gui/file/11d7d19fd9ad0d93b2f78d9d2fe802bd457cd6857a890e874a0a326a617567ac/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:11+00:00", "timestamp": "1771923612", "to_ids": true, "type": "ip-dst", "uuid": "5ecb4898-298d-4e84-9759-ea97c02a9791", "value": "65.21.104.235", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:12+00:00", "timestamp": "1771923612", "to_ids": true, "type": "domain", "uuid": "9ac20a29-9bf2-4bef-adaf-104db45860dc", "value": "forestoaker.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:12+00:00", "timestamp": "1771923612", "to_ids": true, "type": "domain", "uuid": "26b55e72-0967-4142-ab6d-5e99f717d15a", "value": "pub-22a8dd26de0749d5b900b711deea554b.r2.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:12+00:00", "timestamp": "1771923612", "to_ids": false, "type": "url", "uuid": "52c88e84-d282-43ad-9c90-218048796c50", "value": "https://api.github.com/repos/stamparm/maltrail/commits/24035499341e1bb46723e140fac0780173f5585c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:12+00:00", "timestamp": "1771923612", "to_ids": true, "type": "ip-dst", "uuid": "3686f402-25ce-4719-9a0e-377ff9c0ea44", "value": "143.92.60.24", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "mintsloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:12+00:00", "timestamp": "1771923612", "to_ids": false, "type": "url", "uuid": "54361fe1-95b6-40e8-838b-81f6abe615a2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/beec27fc466826454389b9f1f468a1eec0a698aa", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "mintsloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:12+00:00", "timestamp": "1771923613", "to_ids": true, "type": "domain", "uuid": "bf8b7ecd-ecbe-4673-bec6-123be11b0509", "value": "cdhhcehkchddeec.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "mintsloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:13+00:00", "timestamp": "1771923613", "to_ids": true, "type": "domain", "uuid": "ffe74e7c-8aa4-4563-a062-be6b707b1749", "value": "mhlgcebldddbidl.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:13+00:00", "timestamp": "1771923613", "to_ids": false, "type": "url", "uuid": "763a0b43-de91-487c-a734-430f7953e122", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c1f22ce7a75a4f216756da51df1cd3c39814adf5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:13+00:00", "timestamp": "1771923613", "to_ids": true, "type": "domain", "uuid": "37460dd9-9282-4db6-a319-29cdd64d1c9a", "value": "spacesolutionmac.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T09:00:13+00:00", "timestamp": "1771923613", "to_ids": true, "type": "domain", "uuid": "3fce97af-98e3-458e-a647-398dd5ea2cee", "value": "storg.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:04+00:00", "timestamp": "1771927206", "to_ids": false, "type": "url", "uuid": "cfb51b3e-2518-4722-ad0e-d0d7c0db76ff", "value": "https://api.github.com/repos/stamparm/maltrail/commits/efa04e1f95850cc5a6db30e4ff44ccc642432038", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:06+00:00", "timestamp": "1771927206", "to_ids": false, "type": "url", "uuid": "432cec36-4b28-4f47-9b3c-7dab809789cd", "value": "https://www.virustotal.com/gui/ip-address/151.245.121.51/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:06+00:00", "timestamp": "1771927207", "to_ids": true, "type": "domain", "uuid": "c0ba8f42-c0e0-423a-91b2-f8d6415be1f3", "value": "canvasn.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:07+00:00", "timestamp": "1771927207", "to_ids": true, "type": "domain", "uuid": "c3e2f5ce-fd1a-4d4f-bc14-564067bbc077", "value": "convexm.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:07+00:00", "timestamp": "1771927207", "to_ids": true, "type": "domain", "uuid": "1ef67b9c-fe92-403a-9161-e2dafa383760", "value": "credil.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:07+00:00", "timestamp": "1771927207", "to_ids": true, "type": "domain", "uuid": "30cfe200-d31f-4aa4-8f96-a414595e9305", "value": "cygnusn.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:07+00:00", "timestamp": "1771927207", "to_ids": true, "type": "domain", "uuid": "9e8620c1-a640-46a4-a931-f3ad96968c81", "value": "darkbq.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:07+00:00", "timestamp": "1771927207", "to_ids": true, "type": "domain", "uuid": "501d58be-93e1-4db2-841a-0ebce2e07944", "value": "genetiz.shop", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:07+00:00", "timestamp": "1771927208", "to_ids": true, "type": "domain", "uuid": "d9f588d9-b372-4df3-b932-a85100ca33df", "value": "iivouw.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:08+00:00", "timestamp": "1771927208", "to_ids": true, "type": "domain", "uuid": "33a368e3-58bd-4ab7-ad91-b75047cc9bdc", "value": "integri.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:08+00:00", "timestamp": "1771927208", "to_ids": true, "type": "domain", "uuid": "03df8966-b002-43dc-8e43-2c9e1840fd66", "value": "kaboim.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:08+00:00", "timestamp": "1771927208", "to_ids": true, "type": "domain", "uuid": "67f0158c-797a-4aea-b11f-3e7e54cd284c", "value": "mensare.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:08+00:00", "timestamp": "1771927208", "to_ids": true, "type": "domain", "uuid": "0c971624-1fa5-453a-b523-7bc251805b36", "value": "pageld.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:08+00:00", "timestamp": "1771927208", "to_ids": true, "type": "domain", "uuid": "5db8c3c9-4bef-4b7a-b374-46b41d579bcb", "value": "parabg.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:08+00:00", "timestamp": "1771927209", "to_ids": true, "type": "domain", "uuid": "7101ad1c-053f-4804-ac4c-cafec2e91dfb", "value": "screwd.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:09+00:00", "timestamp": "1771927209", "to_ids": true, "type": "domain", "uuid": "bbd8fdaf-6d2f-4ae3-9ba5-3a2face906cd", "value": "testdf.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:09+00:00", "timestamp": "1771927209", "to_ids": true, "type": "domain", "uuid": "5f8ab7d5-2911-4ae8-9c07-f07c67541851", "value": "thinlpr.buzz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:09+00:00", "timestamp": "1771927209", "to_ids": true, "type": "domain", "uuid": "a72590c3-c09e-47db-98c2-c6218071ffb2", "value": "touchfh.shop", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "lummac2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:09+00:00", "timestamp": "1771927209", "to_ids": true, "type": "domain", "uuid": "b31ecc10-671d-4d2c-a28b-3a87526012fa", "value": "wipez.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "quasarrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:09+00:00", "timestamp": "1771927210", "to_ids": false, "type": "url", "uuid": "b5d9d48f-2453-4d68-b4c6-6ef75f4868fe", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0c50ef33b161dfbf964a1887b3828b58437af244", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "quasarrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:10+00:00", "timestamp": "1771927210", "to_ids": false, "type": "url", "uuid": "3ade0326-11aa-4a28-9d4d-92d1b95b7902", "value": "https://x.com/smica83/status/2026055656638124417", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "quasarrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:10+00:00", "timestamp": "1771927210", "to_ids": false, "type": "url", "uuid": "d031e396-efe8-4288-8340-fcc0e4726a93", "value": "https://tria.ge/260223-1y111sds7a/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "quasarrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:10+00:00", "timestamp": "1771927210", "to_ids": true, "type": "ip-dst", "uuid": "b85f7e93-e23d-40b8-8d70-6d1e511cd64d", "value": "192.159.99.176", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:10+00:00", "timestamp": "1771927210", "to_ids": false, "type": "url", "uuid": "27ae456f-5f04-4ed9-bced-5a66edb65f53", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5098133f78daf5c6a3c80eee4c98bcb0fd646e05", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:10+00:00", "timestamp": "1771927210", "to_ids": false, "type": "url", "uuid": "f6a7a99c-624b-4605-aa55-26fb3d43ca9e", "value": "https://x.com/smica83/status/2026056412049072213", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:10+00:00", "timestamp": "1771927211", "to_ids": true, "type": "domain", "uuid": "5e4b7f1e-e923-4dc1-b975-6f5ad90bee55", "value": "heads-resistance-august-sweet.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:11+00:00", "timestamp": "1771927211", "to_ids": false, "type": "url", "uuid": "c57c3524-1804-46f2-b8b4-701076676cbc", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5ec67cc9678a13c2f5cc6479bd191ef1d5e7182d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:11+00:00", "timestamp": "1771927211", "to_ids": false, "type": "url", "uuid": "8f1f8b75-64b8-486e-b5af-902d8a31406f", "value": "https://x.com/smica83/status/2025979039614177769", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:11+00:00", "timestamp": "1771927211", "to_ids": false, "type": "url", "uuid": "6746196b-afc7-4770-b9fc-7c83d8642b55", "value": "https://x.com/smica83/status/2026038524906975421", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:11+00:00", "timestamp": "1771927211", "to_ids": true, "type": "domain", "uuid": "3c10461d-93f0-45f0-bccc-16a6733aca2a", "value": "advise-visual-playstation-closer.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:11+00:00", "timestamp": "1771927211", "to_ids": true, "type": "domain", "uuid": "616e98b5-71b2-4d0a-af20-21665569e7f0", "value": "registry-memory-defines-obtaining.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:11+00:00", "timestamp": "1771927211", "to_ids": false, "type": "url", "uuid": "1a42732f-3396-48d9-acd5-51ed475bb395", "value": "https://api.github.com/repos/stamparm/maltrail/commits/eed2bf66bac09535f533a7f7c4fd5e11fd55a0f2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927212", "to_ids": true, "type": "domain", "uuid": "35c0c032-5f50-4b92-9032-b537e6401ac1", "value": "chk.nsetverification.mydns.bz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927212", "to_ids": true, "type": "domain", "uuid": "b441d82d-8e25-4c06-a6d3-8ecc339b31ad", "value": "cvcmains.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927212", "to_ids": true, "type": "domain", "uuid": "405c2d3d-7eb9-4e97-aa1e-da64d09e3646", "value": "ips-edocdeliver.mydns.bz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927212", "to_ids": true, "type": "domain", "uuid": "507c908e-5882-4136-b68b-164391f19e7b", "value": "navlogin.sev.cvcmains.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927212", "to_ids": true, "type": "domain", "uuid": "0a618787-8fbe-4186-b405-986eebdaa685", "value": "nid-naverhpk.onthewifi.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927212", "to_ids": true, "type": "domain", "uuid": "b584f459-aafb-4012-ad4b-f32499df2b15", "value": "nid-naverjzc.servehalflife.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:12+00:00", "timestamp": "1771927213", "to_ids": true, "type": "domain", "uuid": "3bfb4efe-a0dd-4eda-b787-09952c671129", "value": "nid-navermly.servegame.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:13+00:00", "timestamp": "1771927213", "to_ids": true, "type": "domain", "uuid": "7f42696b-1272-41ab-bbc0-9ffa54133041", "value": "nid-naverohn.3utilities.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:13+00:00", "timestamp": "1771927213", "to_ids": true, "type": "domain", "uuid": "9839125f-7cbb-4858-85c5-23adddf9a795", "value": "nid-naverxqh.servecounterstrike.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:13+00:00", "timestamp": "1771927213", "to_ids": true, "type": "domain", "uuid": "fc4d410e-d67a-4606-a052-dc86e0f2a8b4", "value": "nkdocument-hometax.mydns.bz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:13+00:00", "timestamp": "1771927213", "to_ids": true, "type": "domain", "uuid": "f96fe4bf-7970-439e-9cce-f30974d42bf6", "value": "nsetverification.mydns.bz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:13+00:00", "timestamp": "1771927213", "to_ids": true, "type": "domain", "uuid": "53d1d06c-4537-4164-b30e-73eb4630b823", "value": "nuser-login.ips-edocdeliver.mydns.bz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T10:00:13+00:00", "timestamp": "1771927214", "to_ids": true, "type": "domain", "uuid": "1258361d-a594-42f1-8657-d37ebe98ee56", "value": "sev.cvcmains.dns.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:02+00:00", "timestamp": "1771930802", "to_ids": false, "type": "url", "uuid": "98e3799a-5bb0-4521-8910-6515538566c3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f0c057f37fef906bfeaf8c85eebc02bcc5133d2a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:02+00:00", "timestamp": "1771930802", "to_ids": false, "type": "url", "uuid": "5123e334-eadd-42b0-9092-24446b8de441", "value": "https://www.virustotal.com/gui/file/b804437ff855bd3fd448d2bf76f47ada7dcee6288d8f0a53d41fd3b1361c4c0d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:02+00:00", "timestamp": "1771930803", "to_ids": true, "type": "domain", "uuid": "ea27cd8b-a04c-4e40-89cc-a6853c633dba", "value": "vvork-space.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:03+00:00", "timestamp": "1771930804", "to_ids": false, "type": "url", "uuid": "37985cb3-8ead-4e8a-967d-9bf2cedcda4f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/dbf4930c405e099e546da792cde0bf9210bff734", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:04+00:00", "timestamp": "1771930805", "to_ids": false, "type": "url", "uuid": "3192ab40-40e9-4073-b8f0-b6ae32e53b5c", "value": "https://www.virustotal.com/gui/file/0e4780dd90a355c293a08c5607887b95ba4d7d5bffea1a8df92450dfc08934ea/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:05+00:00", "timestamp": "1771930805", "to_ids": true, "type": "domain", "uuid": "1c6c02fb-0fb4-4048-862c-4f0190f8e6f2", "value": "alphazero1-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:05+00:00", "timestamp": "1771930805", "to_ids": true, "type": "domain", "uuid": "8d29838f-3990-408d-90dc-b73f7d5f3d05", "value": "alphazero10-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:05+00:00", "timestamp": "1771930806", "to_ids": true, "type": "domain", "uuid": "a3b05175-26eb-4731-9cd6-6ba8308c8777", "value": "alphazero2-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:06+00:00", "timestamp": "1771930806", "to_ids": true, "type": "domain", "uuid": "5d428385-a15e-415e-8892-a2d67a838080", "value": "alphazero3-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:06+00:00", "timestamp": "1771930806", "to_ids": true, "type": "domain", "uuid": "c652e238-f6de-4dee-b0ad-b0a649067da6", "value": "alphazero4-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:06+00:00", "timestamp": "1771930806", "to_ids": true, "type": "domain", "uuid": "e8fded21-50f6-4c33-80ae-7920c857ef05", "value": "alphazero5-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:06+00:00", "timestamp": "1771930806", "to_ids": true, "type": "domain", "uuid": "c58a7bf8-26a5-48c7-a8db-b01695fd6487", "value": "alphazero6-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:06+00:00", "timestamp": "1771930806", "to_ids": true, "type": "domain", "uuid": "349c0330-8842-4df4-831d-39a8535731b6", "value": "alphazero7-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:06+00:00", "timestamp": "1771930807", "to_ids": true, "type": "domain", "uuid": "9f4037d0-b5b6-4397-94b5-198524369b82", "value": "alphazero8-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T11:00:07+00:00", "timestamp": "1771930807", "to_ids": true, "type": "domain", "uuid": "439b480e-4213-411a-8198-6b17f4c192d6", "value": "alphazero9-endscape.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:02+00:00", "timestamp": "1771934403", "to_ids": false, "type": "url", "uuid": "aca8b87e-af0a-4cf9-9996-d982fd6655ae", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5ea1173644e6bd59ebd6d5c49fcc62fef5af1b95", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:03+00:00", "timestamp": "1771934405", "to_ids": false, "type": "url", "uuid": "26355c19-16cb-47db-ba68-a51d0773599e", "value": "https://x.com/tuckner/status/2026069982493229434", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:05+00:00", "timestamp": "1771934406", "to_ids": false, "type": "url", "uuid": "132f1fdc-b21a-43b0-a32d-c428b7bd905c", "value": "https://annex.security/blog/promise-bomb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:06+00:00", "timestamp": "1771934406", "to_ids": true, "type": "domain", "uuid": "e880ba8d-37a4-40c9-b48b-0afe5221a0a6", "value": "page-guard.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:06+00:00", "timestamp": "1771934406", "to_ids": true, "type": "domain", "uuid": "7bd05e22-fa50-411a-95b0-b9168c467c84", "value": "pixel-defence.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:06+00:00", "timestamp": "1771934406", "to_ids": false, "type": "url", "uuid": "200202a1-7014-4c42-9ef3-8bdc90ce1412", "value": "https://api.github.com/repos/stamparm/maltrail/commits/24f04eb96c56c6f97f1ed248dd1f8f82fc85040c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:06+00:00", "timestamp": "1771934407", "to_ids": false, "type": "url", "uuid": "95bcf8b5-6344-4c0d-bc27-6d73c5dcd9d7", "value": "https://x.com/malwrhunterteam/status/2026251417372049675", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:07+00:00", "timestamp": "1771934407", "to_ids": false, "type": "url", "uuid": "7aabae56-40e7-4a65-b0ef-431558734abd", "value": "https://www.virustotal.com/gui/file/73ae9fe72b3340b95e7187cd51de3b7476cfb84aa20b9903cfaff4f1c96a3e01/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T12:00:07+00:00", "timestamp": "1771934407", "to_ids": true, "type": "domain", "uuid": "3325dc84-5296-42c9-a122-557bf0970606", "value": "streamcdn.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:03+00:00", "timestamp": "1771938004", "to_ids": false, "type": "url", "uuid": "4f3c0bd4-c9ed-4911-b378-bcb2ab92e6c3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/2d39fd81500e67b0a26081813c5bb8f46cffe31e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:04+00:00", "timestamp": "1771938004", "to_ids": false, "type": "url", "uuid": "aa02db17-9b08-44b2-b6a4-63d4b571fa99", "value": "https://www.virustotal.com/gui/ip-address/38.180.80.50/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:04+00:00", "timestamp": "1771938004", "to_ids": true, "type": "domain", "uuid": "70b96cf3-e392-4d2d-bb1a-0622efc5f02b", "value": "javascripttestlibrary.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:05+00:00", "timestamp": "1771938005", "to_ids": false, "type": "url", "uuid": "6b9a6b47-728b-4879-a1b7-1296fd451dda", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b3fa70ad54a979c37f8c2de4bf0b6934d0000a24", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:05+00:00", "timestamp": "1771938005", "to_ids": true, "type": "domain", "uuid": "ec883d83-b9e3-46e7-bb4a-f1e48f7b04db", "value": "chatliveapp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:05+00:00", "timestamp": "1771938005", "to_ids": true, "type": "domain", "uuid": "db2b3859-6adb-4c81-a32d-ad3ae7ded215", "value": "livechathub.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:05+00:00", "timestamp": "1771938005", "to_ids": false, "type": "url", "uuid": "4668b14d-3288-449c-9897-ed7ab37efa78", "value": "https://api.github.com/repos/stamparm/maltrail/commits/4df89b99efb34e1f6f58e84340e0f41c59442f61", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:05+00:00", "timestamp": "1771938005", "to_ids": true, "type": "domain", "uuid": "2fe7f6c2-80a1-4f4a-b74c-06ac76eef593", "value": "liverespond.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:05+00:00", "timestamp": "1771938006", "to_ids": true, "type": "domain", "uuid": "9b3e9115-ffd6-4ea1-9127-f209f6dec4d5", "value": "apicheck.chatliveplus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:06+00:00", "timestamp": "1771938006", "to_ids": true, "type": "domain", "uuid": "12a1d19b-a366-47b4-a200-323c26885c2a", "value": "blog.chatliveplus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:06+00:00", "timestamp": "1771938006", "to_ids": true, "type": "domain", "uuid": "5f48fb88-07ed-449d-bdf0-b1d42a8a99e4", "value": "chat.eventchatsupport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:06+00:00", "timestamp": "1771938006", "to_ids": true, "type": "domain", "uuid": "75169f26-4748-46c6-b762-87c0d5332860", "value": "calendar.livechatlite.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:06+00:00", "timestamp": "1771938006", "to_ids": true, "type": "domain", "uuid": "6fd2d6be-3301-4866-a6a5-fb33e5373489", "value": "mail.chatliveplus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:06+00:00", "timestamp": "1771938007", "to_ids": true, "type": "domain", "uuid": "225525fb-6c53-4ca9-b0a6-3d5b0df85171", "value": "online.eventchatsupport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:07+00:00", "timestamp": "1771938007", "to_ids": true, "type": "domain", "uuid": "b9803e68-ba72-4f87-ad84-72c86e62e427", "value": "portal.livechatlite.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:07+00:00", "timestamp": "1771938007", "to_ids": true, "type": "domain", "uuid": "16584fe7-d420-45b0-9e0a-096d1bc7413a", "value": "status.livechatlite.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:07+00:00", "timestamp": "1771938007", "to_ids": true, "type": "domain", "uuid": "13a2159b-da1e-472c-a6e5-c4ab43f83d55", "value": "system.eventchatsupport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:07+00:00", "timestamp": "1771938007", "to_ids": true, "type": "domain", "uuid": "674b7a58-2845-47f1-a779-c786082d8772", "value": "webdisk.chatliveplus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:07+00:00", "timestamp": "1771938008", "to_ids": false, "type": "url", "uuid": "488e1298-9a15-486b-bf51-2be5792de97d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/4c405151fc705dbf7e7854e5a799d635c80c97a7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:08+00:00", "timestamp": "1771938008", "to_ids": false, "type": "url", "uuid": "698d4428-73ff-4236-ad4b-dbbc53ac2daa", "value": "https://x.com/sdcyberresearch/status/2026266049755164860", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:08+00:00", "timestamp": "1771938008", "to_ids": true, "type": "domain", "uuid": "cdd94870-bd0e-4a35-8c3d-3a81e794d3ff", "value": "chatliveplus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:08+00:00", "timestamp": "1771938008", "to_ids": true, "type": "domain", "uuid": "8a621145-9c81-4c2c-b9f5-7b23ab3e00c3", "value": "eventchatsupport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T13:00:08+00:00", "timestamp": "1771938008", "to_ids": true, "type": "domain", "uuid": "efde0b67-bd3b-4080-acff-836b706030a2", "value": "livechatlite.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:03+00:00", "timestamp": "1771941605", "to_ids": false, "type": "url", "uuid": "4468c753-8935-4135-8cb8-dbbb0b7aa068", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a26b69e1fc21b37577409db62e93347d90798bfc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:05+00:00", "timestamp": "1771941605", "to_ids": false, "type": "url", "uuid": "f7ac0eb8-d7ea-48b4-b877-b50728cde147", "value": "https://socket.dev/blog/malicious-chrome-extension-performs-hidden-affiliate-hijacking", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:05+00:00", "timestamp": "1771941606", "to_ids": true, "type": "domain", "uuid": "3e273dfb-ba30-458b-bde8-5cb236269c54", "value": "10xprofit.io", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:06+00:00", "timestamp": "1771941606", "to_ids": true, "type": "domain", "uuid": "bf4b79b0-4b40-43a1-8b6b-651518310464", "value": "app.10xprofit.io", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:06+00:00", "timestamp": "1771941606", "to_ids": false, "type": "url", "uuid": "ee9e2471-53c9-4178-a711-8fdc1c87e364", "value": "https://api.github.com/repos/stamparm/maltrail/commits/66ea3343d6a60f23712520c7d0e9d5d6f72133a1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:06+00:00", "timestamp": "1771941607", "to_ids": false, "type": "url", "uuid": "2e1bd621-5a81-472e-9ee7-052f5a6e2bba", "value": "https://www.cyberproof.com/blog/fake-captcha-attack-uncovered-clickfix-infostealer-campaign", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:07+00:00", "timestamp": "1771941607", "to_ids": true, "type": "domain", "uuid": "2d12065d-14f8-4ad1-a1e6-91313caf0416", "value": "pinmaha.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:07+00:00", "timestamp": "1771941607", "to_ids": false, "type": "url", "uuid": "309acd82-7efb-44aa-ae4c-43f3be1c0ba0", "value": "https://api.github.com/repos/stamparm/maltrail/commits/99b248df35bcf6619a11b06548379b4a2a8e6e4a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:07+00:00", "timestamp": "1771941607", "to_ids": false, "type": "url", "uuid": "0a56d4c7-8d8c-41b0-be79-01e39dff8d7f", "value": "https://www.virustotal.com/gui/file/8099e85c4aa05f50ff299a130dc26a67b45aed519668e8b1ee1692e0034196c2/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:07+00:00", "timestamp": "1771941607", "to_ids": true, "type": "ip-dst", "uuid": "13069024-d3e8-4ea4-8db8-f1d660bbe83e", "value": "141.195.117.128", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:07+00:00", "timestamp": "1771941607", "to_ids": true, "type": "domain", "uuid": "deee2e6b-78f6-4879-b9cb-3425c7a55c32", "value": "apuliae.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "netsupport", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T14:00:07+00:00", "timestamp": "1771941608", "to_ids": true, "type": "domain", "uuid": "8ab216a7-4189-4067-911c-b5e64840fd9e", "value": "jbactors.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:03+00:00", "timestamp": "1771945204", "to_ids": false, "type": "url", "uuid": "1c5d0f8e-3767-4682-a77b-55d7b1f3513e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d1bdbe806e95a93b7d45361744f2184a3731722b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:04+00:00", "timestamp": "1771945205", "to_ids": false, "type": "url", "uuid": "6d39f730-2e01-4965-8142-37f9256cdde5", "value": "https://x.com/D3LabIT/status/2026278544272232666", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:05+00:00", "timestamp": "1771945205", "to_ids": true, "type": "domain", "uuid": "1bf822a8-b40d-481f-8c27-9b933746e2b3", "value": "mandatechgroup.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:05+00:00", "timestamp": "1771945205", "to_ids": true, "type": "domain", "uuid": "61371bdc-566f-47e5-8312-bd26f5005219", "value": "eventul.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "atomsilo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:05+00:00", "timestamp": "1771945206", "to_ids": false, "type": "url", "uuid": "8010b234-3a4f-4bb5-a4f8-859ad249446e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/756bbf828079b7e8f5b4ba6ef70a5d8df3d92b8a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "atomsilo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:06+00:00", "timestamp": "1771945206", "to_ids": false, "type": "url", "uuid": "3e45947c-9389-4e7e-90cc-c8a907db910e", "value": "https://x.com/fbgwls245/status/2026299482477088838", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "atomsilo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:06+00:00", "timestamp": "1771945206", "to_ids": true, "type": "domain", "uuid": "1f3232fc-813c-473f-94a2-d494884668af", "value": "npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowqtyqn24or556qd.onion", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:06+00:00", "timestamp": "1771945206", "to_ids": false, "type": "url", "uuid": "98eb28b3-76d6-4ac4-814f-f429af431581", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1c88d89774aef47e80277d812ab21d7e807c97be", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:06+00:00", "timestamp": "1771945206", "to_ids": false, "type": "url", "uuid": "67cfcc1f-b5d5-4107-a48e-b61a4466cb1a", "value": "https://x.com/JAMESWT_WT/status/2026300744635129887", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:06+00:00", "timestamp": "1771945206", "to_ids": false, "type": "url", "uuid": "2aacada9-f1e7-4fc7-a938-50248b1df3ae", "value": "https://www.virustotal.com/gui/file/6f8e3ec4e11770eb4202b1ccae2423040c0703f7e7bbfd8330de0a7712f23498/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:06+00:00", "timestamp": "1771945207", "to_ids": false, "type": "url", "uuid": "86d6fa44-908f-4f91-b451-97d3b065beda", "value": "https://www.virustotal.com/gui/file/79d7358fd1cdaecc1adf0c054c2394abef95df87ef5191f70778da24310c790e/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:07+00:00", "timestamp": "1771945207", "to_ids": true, "type": "ip-dst", "uuid": "a0c96d59-f2dd-498b-90e1-9e8a7a0e4960", "value": "198.23.175.46", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:07+00:00", "timestamp": "1771945207", "to_ids": true, "type": "ip-dst", "uuid": "940cd4a5-bd0e-4f9c-9399-2348e3807474", "value": "38.240.32.108", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "remcos", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:07+00:00", "timestamp": "1771945207", "to_ids": true, "type": "domain", "uuid": "164a3e2a-857a-47fe-b1ad-04037dc6e81d", "value": "jerrymac2008.duckdns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:07+00:00", "timestamp": "1771945207", "to_ids": false, "type": "url", "uuid": "65684eff-c70d-4261-9792-f63567808b81", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b65b06b38cbe5319c83952879cabb4e3cc8bf9d7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:07+00:00", "timestamp": "1771945207", "to_ids": true, "type": "ip-dst", "uuid": "055f5fe0-c68f-4ccd-8be6-6cc0808247f6", "value": "212.11.64.250", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:08+00:00", "timestamp": "1771945208", "to_ids": false, "type": "url", "uuid": "fc92d600-b6a0-4247-a058-ddfc7918b9b3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b9bae35324e39b3d63a6ade98778f91a933f9be0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:08+00:00", "timestamp": "1771945208", "to_ids": false, "type": "url", "uuid": "5e29647b-29ca-4c19-8b5e-4c51654d3fc5", "value": "https://x.com/blackorbird/status/2025588291073171714", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:08+00:00", "timestamp": "1771945208", "to_ids": false, "type": "url", "uuid": "0d59acbf-0f59-4bab-8820-fd06107fa5c8", "value": "https://cyberandramen.net/2026/02/21/llms-in-the-kill-chain-inside-a-custom-mcp-targeting-fortigate-devices-across-continents", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:08+00:00", "timestamp": "1771945208", "to_ids": false, "type": "url", "uuid": "a175f5bc-6625-4511-ab4a-e98967766e6a", "value": "https://aws.amazon.com/ru/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:08+00:00", "timestamp": "1771945208", "to_ids": true, "type": "ip-dst", "uuid": "bf53a6d5-95f3-4feb-839d-9d0075d257c2", "value": "103.164.81.110", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:08+00:00", "timestamp": "1771945209", "to_ids": true, "type": "ip-dst", "uuid": "9d412e24-e8d9-4b29-b340-bf36c0345305", "value": "106.52.47.65", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:09+00:00", "timestamp": "1771945209", "to_ids": true, "type": "ip-dst", "uuid": "e31f2759-89ba-434e-91ba-92c607ba8bfa", "value": "115.120.233.95", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:09+00:00", "timestamp": "1771945209", "to_ids": true, "type": "ip-dst", "uuid": "dd8e59ea-6171-493e-bd69-c1196de3278e", "value": "118.25.186.119", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:09+00:00", "timestamp": "1771945209", "to_ids": true, "type": "ip-dst", "uuid": "139c453b-78c3-48a7-bce0-62013094a0ff", "value": "142.171.160.137", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:09+00:00", "timestamp": "1771945209", "to_ids": true, "type": "ip-dst", "uuid": "dcbf7bc5-0bde-4d33-b9df-23f2623be9ef", "value": "144.31.224.253", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:09+00:00", "timestamp": "1771945209", "to_ids": true, "type": "ip-dst", "uuid": "2a76dce3-f3f0-4d99-b34f-f098f8bc0cd0", "value": "146.190.195.154", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:09+00:00", "timestamp": "1771945210", "to_ids": true, "type": "ip-dst", "uuid": "483fc778-edc8-4f12-8b6c-b005ba479292", "value": "146.190.82.132", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:10+00:00", "timestamp": "1771945210", "to_ids": true, "type": "ip-dst", "uuid": "32b81b61-8ee5-477a-aae4-f2eef8b64b3e", "value": "154.219.114.92", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:10+00:00", "timestamp": "1771945210", "to_ids": true, "type": "ip-dst", "uuid": "73b195f3-6ee0-4023-9884-6c1474a2a6c8", "value": "156.238.244.173", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:10+00:00", "timestamp": "1771945210", "to_ids": true, "type": "ip-dst", "uuid": "2d82e882-b71a-44a2-a9af-7cdaf8f67b12", "value": "185.196.11.225", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:11+00:00", "timestamp": "1771945211", "to_ids": true, "type": "ip-dst", "uuid": "4f986d74-5c33-4d39-9012-419c8bcc37e7", "value": "43.167.237.212", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:11+00:00", "timestamp": "1771945211", "to_ids": true, "type": "ip-dst", "uuid": "dbf4484e-60d1-4aeb-9009-e401642bb333", "value": "47.101.186.156", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:12+00:00", "timestamp": "1771945212", "to_ids": true, "type": "ip-dst", "uuid": "480133e7-d9aa-48a7-b47b-a49ed65b18a8", "value": "47.95.33.207", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:12+00:00", "timestamp": "1771945212", "to_ids": true, "type": "ip-dst", "uuid": "2c405cae-7be5-4540-b4c7-163b9340709e", "value": "60.204.227.64", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:12+00:00", "timestamp": "1771945212", "to_ids": true, "type": "ip-dst", "uuid": "1a213531-b86b-4195-80b8-6713b15049b4", "value": "62.234.61.215", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:12+00:00", "timestamp": "1771945212", "to_ids": true, "type": "domain", "uuid": "a8f95f29-7d7b-453f-9d90-3f3b6388b8c7", "value": "drb420.ru", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T15:00:12+00:00", "timestamp": "1771945212", "to_ids": true, "type": "domain", "uuid": "ed7715e2-5f00-43a7-a198-c921b44c3487", "value": "cyberstrike.drb420.ru", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cipherforce", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:04+00:00", "timestamp": "1771948804", "to_ids": false, "type": "url", "uuid": "567c27da-1de2-4da4-a232-f934213edd32", "value": "https://api.github.com/repos/stamparm/maltrail/commits/582133a4fc977b91d356ed4d121c6ec0be15ef6f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cipherforce", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:04+00:00", "timestamp": "1771948805", "to_ids": false, "type": "url", "uuid": "51fbbe73-4f56-45d5-8f83-8f95d318749a", "value": "https://x.com/fbgwls245/status/2025926038845526373", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cipherforce", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:05+00:00", "timestamp": "1771948805", "to_ids": true, "type": "domain", "uuid": "d3a08380-9c1d-4fe0-8027-9c8f5a548178", "value": "o3ydbkayttkyg4iw2nc732jxmmex25bjeyqyvuuyngnxmpehdefjr3qd.onion", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:05+00:00", "timestamp": "1771948805", "to_ids": false, "type": "url", "uuid": "efb40b5b-adce-4f21-afeb-8b1f8898666e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/289ab7eb1c673037bccbe2943cf46f71dc420d61", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:05+00:00", "timestamp": "1771948805", "to_ids": false, "type": "url", "uuid": "2d15f030-d16a-4ae6-9835-ac83d4b80f81", "value": "https://www.virustotal.com/gui/ip-address/20.2.2.169/community", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:05+00:00", "timestamp": "1771948806", "to_ids": false, "type": "url", "uuid": "930f1a4d-1289-4a3c-9b77-72161894b7f2", "value": "https://www.virustotal.com/gui/ip-address/103.164.203.173/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:06+00:00", "timestamp": "1771948806", "to_ids": true, "type": "ip-dst", "uuid": "2ae84d34-d340-4633-a2c5-e60af39027ce", "value": "20.2.2.169", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:06+00:00", "timestamp": "1771948806", "to_ids": true, "type": "ip-dst", "uuid": "a50a7629-a192-435a-b44a-bae8d0e3fa97", "value": "103.164.203.173", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:06+00:00", "timestamp": "1771948806", "to_ids": false, "type": "url", "uuid": "3e586d8e-23cb-40f5-8031-098290909d2c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/677b82dc8b6e4a9a2fa9ecdca81ad5d43c8c9469", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:06+00:00", "timestamp": "1771948806", "to_ids": false, "type": "url", "uuid": "ecddd101-8b8f-48e3-8df2-92f8037a3d1a", "value": "https://www.virustotal.com/gui/ip-address/43.164.1.146/community", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vshell", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:06+00:00", "timestamp": "1771948806", "to_ids": true, "type": "ip-dst", "uuid": "906839cd-c4e6-4da6-8d55-cde7d4c1ecc1", "value": "43.164.1.146", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:06+00:00", "timestamp": "1771948807", "to_ids": false, "type": "url", "uuid": "b7168ea2-acc9-4542-8782-168dd1ddacb3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/efabab581c22a454590bd4e67d5f44807ef786f7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:07+00:00", "timestamp": "1771948807", "to_ids": false, "type": "url", "uuid": "3c252aaf-0463-4f85-85e0-f9d98c1bbc09", "value": "https://www.security.com/blog-post/lazarus-medusa-ransomware", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:07+00:00", "timestamp": "1771948807", "to_ids": true, "type": "domain", "uuid": "1f3e8b29-7f2c-4e23-a6e8-cf8976230fa8", "value": "amazonfiso.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:07+00:00", "timestamp": "1771948807", "to_ids": true, "type": "domain", "uuid": "68f21326-fbec-4342-9d5f-ad3bb594e202", "value": "human-check.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:07+00:00", "timestamp": "1771948807", "to_ids": true, "type": "domain", "uuid": "1574ec74-a891-4bd9-98e5-cd4139654623", "value": "illycafe.my", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:07+00:00", "timestamp": "1771948807", "to_ids": true, "type": "domain", "uuid": "9d53de68-3ccf-473a-93b4-4bc83ab54c11", "value": "illycoffee.my", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:07+00:00", "timestamp": "1771948808", "to_ids": true, "type": "domain", "uuid": "bf86e26a-c0a2-43c7-a54b-cfc333c7968b", "value": "markethubuk.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:08+00:00", "timestamp": "1771948808", "to_ids": true, "type": "domain", "uuid": "84212670-5fbb-4601-97de-6d6b5100a7ed", "value": "sictradingc.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:08+00:00", "timestamp": "1771948808", "to_ids": true, "type": "domain", "uuid": "cc0f5f0e-0f86-4449-8418-8c94e0fb70e5", "value": "trustpdfs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:08+00:00", "timestamp": "1771948808", "to_ids": true, "type": "domain", "uuid": "6e17399b-4310-4a05-8e3e-bb942f2abec1", "value": "zypras.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "toponev", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:08+00:00", "timestamp": "1771948808", "to_ids": false, "type": "url", "uuid": "36d5aabd-b7d1-4a0e-a56c-cfce46e92cf8", "value": "https://api.github.com/repos/stamparm/maltrail/commits/60c20e2c7b759acd5decf91a956b9b68753bf90c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "toponev", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:08+00:00", "timestamp": "1771948808", "to_ids": false, "type": "url", "uuid": "41d7d18b-f94b-4600-98b8-72668643ea21", "value": "https://x.com/Fact_Finder03/status/2026298291328368975", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "toponev", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T16:00:08+00:00", "timestamp": "1771948808", "to_ids": true, "type": "ip-dst", "uuid": "2055488f-864b-4aec-b275-cc8f2e2dac82", "value": "41.216.189.53", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T17:00:02+00:00", "timestamp": "1771952402", "to_ids": false, "type": "url", "uuid": "9f34abff-301e-45fd-941e-6566c0197a8c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/89624b5e6f14ecba12db8595fc770e199355d6f9", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T17:00:02+00:00", "timestamp": "1771952403", "to_ids": false, "type": "url", "uuid": "5bfa615f-81d3-40dd-b2ba-b92539876c0e", "value": "https://x.com/blackorbird/status/2025586527993274498", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:04+00:00", "timestamp": "1771963205", "to_ids": false, "type": "url", "uuid": "23ada2ad-eeb6-45c8-9e13-27c24431de97", "value": "https://api.github.com/repos/stamparm/maltrail/commits/67fa41d79dd2789708aa0492622328855f45c270", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:05+00:00", "timestamp": "1771963205", "to_ids": false, "type": "url", "uuid": "c53e9b14-f75d-4d51-9135-2d618adc0aaf", "value": "https://x.com/1ZRR4H/status/2026384826761199676", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:05+00:00", "timestamp": "1771963205", "to_ids": true, "type": "ip-dst", "uuid": "7d6ce00a-187d-4130-8e6d-bcd9c0dd7ea6", "value": "46.62.221.89", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:06+00:00", "timestamp": "1771963206", "to_ids": false, "type": "url", "uuid": "b66f4736-5a74-4d12-81cb-39672ec29e7c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7904b0d3fff925b930c587704b3e92777712c502", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:06+00:00", "timestamp": "1771963206", "to_ids": false, "type": "url", "uuid": "943a001a-75a2-4704-bb71-c964b4ca28ba", "value": "https://www.virustotal.com/gui/ip-address/62.3.58.8/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:06+00:00", "timestamp": "1771963206", "to_ids": false, "type": "url", "uuid": "640f997d-f7f8-4305-b87f-1095e0eb7fc8", "value": "https://www.virustotal.com/gui/file/ea078216452f5f6d4eea27bbc062286396a5252e2c267ecc3933d05a4e38da15/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:06+00:00", "timestamp": "1771963207", "to_ids": true, "type": "domain", "uuid": "8ba948b1-5c60-4d7b-b280-0d53ecc40fc2", "value": "resumecvmaker.ru", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:07+00:00", "timestamp": "1771963207", "to_ids": true, "type": "domain", "uuid": "30e80c0b-e710-4b9f-b2fe-4e99fccb5303", "value": "vekas-automation.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:07+00:00", "timestamp": "1771963207", "to_ids": false, "type": "url", "uuid": "d24737db-f3a9-450f-a85d-e72eb998b6ab", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f074b4bfb174bbf77af4ff2fd4b47f982929b516", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:07+00:00", "timestamp": "1771963207", "to_ids": false, "type": "url", "uuid": "ccffdb66-1b82-4fcc-82ee-3b4a7057a20e", "value": "https://x.com/smica83/status/2026349402948813096", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:07+00:00", "timestamp": "1771963207", "to_ids": false, "type": "url", "uuid": "44e12fb6-e464-4cf3-bbe5-0501747290b7", "value": "https://www.virustotal.com/gui/file/2bbcbc88d04615079fa17708c62f07ccb138c19bb9ed78ae43f9172cd91931ba/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:07+00:00", "timestamp": "1771963207", "to_ids": true, "type": "domain", "uuid": "b47f4fb2-065d-4c10-a4a3-f6afa3b9b845", "value": "rostransnadzor.digital", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:07+00:00", "timestamp": "1771963208", "to_ids": false, "type": "url", "uuid": "0f89179d-0712-4148-ad9d-f49ecc591502", "value": "https://api.github.com/repos/stamparm/maltrail/commits/79b0318c2451421aa950094ef2594437df13f142", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cgnrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:08+00:00", "timestamp": "1771963208", "to_ids": false, "type": "url", "uuid": "831a25c7-ba81-405a-aa79-321b99976ea5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e6c2a12c32d3787f0be06635d463b23a1f4fe72d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cgnrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:08+00:00", "timestamp": "1771963208", "to_ids": false, "type": "url", "uuid": "cdaa9eda-10f1-4ed6-b484-cc293363a2a8", "value": "https://x.com/solostalking/status/2026332675301413166", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cgnrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:08+00:00", "timestamp": "1771963208", "to_ids": true, "type": "ip-dst", "uuid": "aaa72915-d8e8-408c-a533-3635e7131598", "value": "31.57.77.35", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "antigravityrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:08+00:00", "timestamp": "1771963208", "to_ids": false, "type": "url", "uuid": "d3d55c84-f603-4f01-a5e9-f61379601453", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3f4706878c09c3934de63668ba4247c7eeee0121", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "antigravityrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:08+00:00", "timestamp": "1771963208", "to_ids": false, "type": "url", "uuid": "8c011fce-5750-4686-a33d-08251eaf8fc6", "value": "https://www.virustotal.com/gui/ip-address/31.57.77.35/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:09+00:00", "timestamp": "1771963209", "to_ids": false, "type": "url", "uuid": "575030d6-1385-4793-b366-e537d09c5236", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d2c7fc0df87b18af469a19bd49007e687a54318c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:09+00:00", "timestamp": "1771963209", "to_ids": false, "type": "url", "uuid": "95eac68c-11a7-417e-b1ed-47e14adb3754", "value": "https://www.virustotal.com/gui/file/004639748661efa955f4d6d52de65d33d3f6c6d75c4137722719cb08456e4f87/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:09+00:00", "timestamp": "1771963209", "to_ids": false, "type": "url", "uuid": "4ca385df-2cae-4cdb-8113-f7ab3849f3c0", "value": "https://www.virustotal.com/gui/file/13b9ff2a2f6af567b37e4d28a3b55f079d4f921173267bd49e9f2e3b622a0848/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:09+00:00", "timestamp": "1771963209", "to_ids": false, "type": "url", "uuid": "82b2999b-dd61-4c9a-8a5d-cf90fefd9692", "value": "https://www.virustotal.com/gui/file/17fc9ea70be12e8ea5fd27cc4b51a108cc2eb4941dd31542042533d1eea6ef39/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:09+00:00", "timestamp": "1771963210", "to_ids": false, "type": "url", "uuid": "4c42850e-1f1a-4cc2-a989-36d020bb4a6e", "value": "https://www.virustotal.com/gui/file/64d3c8c0534a984ec986697bfb80dbd7365b67118c89390be7185d5d9db92dc2/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:10+00:00", "timestamp": "1771963210", "to_ids": false, "type": "url", "uuid": "2a72eb82-a271-408e-8cd6-e25851b37986", "value": "https://www.virustotal.com/gui/file/7eb56684f5a4ed6022fd5295bd3605daf8a05ee8031d62f238176f524e739460/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:10+00:00", "timestamp": "1771963210", "to_ids": false, "type": "url", "uuid": "3d5f5bd3-69b9-4e2f-af9b-81ae4d037cf6", "value": "https://www.virustotal.com/gui/file/aedbdf70fcbab41f6056d197909941db72fb9a3adfc411d26678ecc338e08012/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "discordgrabber", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T20:00:10+00:00", "timestamp": "1771963210", "to_ids": false, "type": "url", "uuid": "d442cc51-21a7-46e2-9cb5-10095c6cc82a", "value": "https://www.virustotal.com/gui/file/cb5e294246df40c3a0f8d62c6ec796fdd4137ca32a041c7ee023cde247742fcc/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:03+00:00", "timestamp": "1771966803", "to_ids": false, "type": "url", "uuid": "48518d07-11aa-49f3-94a0-86a91d5a6d63", "value": "https://api.github.com/repos/stamparm/maltrail/commits/03b485ea01b6dffc2fcc88037fab472507143c8f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:03+00:00", "timestamp": "1771966805", "to_ids": false, "type": "url", "uuid": "87721ee0-ea8e-422a-b423-395e152d558d", "value": "https://www.virustotal.com/gui/ip-address/92.63.106.237/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:05+00:00", "timestamp": "1771966805", "to_ids": true, "type": "ip-dst", "uuid": "4b77a1c9-aa2e-4841-a181-20c36d3a8d7a", "value": "92.63.106.237", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:05+00:00", "timestamp": "1771966806", "to_ids": true, "type": "domain", "uuid": "26f6c619-4f7b-4170-af76-71790b99f145", "value": "tseytlin.su", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:06+00:00", "timestamp": "1771966806", "to_ids": true, "type": "domain", "uuid": "fb7608c6-018c-4698-abac-6e50d938e926", "value": "dc.tseytlin.su", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:06+00:00", "timestamp": "1771966806", "to_ids": false, "type": "url", "uuid": "58b17739-cac4-43c6-b8be-b3b2503fd8f9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d586671101188b7ba0aa99fbabc241e9b8ccdcf1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:06+00:00", "timestamp": "1771966806", "to_ids": false, "type": "url", "uuid": "25ec9063-6c69-4126-8931-65a45f463fcb", "value": "https://x.com/smica83/status/2026368400381944001", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:06+00:00", "timestamp": "1771966806", "to_ids": true, "type": "ip-dst", "uuid": "f1a0550a-4131-4cfa-bcd6-4943893b71db", "value": "31.97.125.241", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:06+00:00", "timestamp": "1771966807", "to_ids": true, "type": "ip-dst", "uuid": "8188d508-ce2c-46a1-b7bd-150a0df36ff5", "value": "64.91.224.4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dcrat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:07+00:00", "timestamp": "1771966807", "to_ids": true, "type": "domain", "uuid": "87784b96-19a6-4876-9cee-eb4d55af1c4c", "value": "tseytlin.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:07+00:00", "timestamp": "1771966807", "to_ids": false, "type": "url", "uuid": "d895dda1-054d-427a-b769-43f684b737ea", "value": "https://api.github.com/repos/stamparm/maltrail/commits/249a8d167a180dca27c11978e21a42e0194258b3", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-24T21:00:07+00:00", "timestamp": "1771966807", "to_ids": false, "type": "url", "uuid": "c67c0b85-c8ab-4b1d-a096-711a57908e6c", "value": "https://tria.ge/260224-xesnradz3d/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }