{
  "Event": {
    "analysis": "1",
    "date": "2026-07-17",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-07-18",
    "publish_timestamp": "1784412006",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1784412006",
    "uuid": "c7d460ba-e4f5-4ed6-9714-9cda114a4c62",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T10:00:03+00:00",
        "timestamp": "1784368804",
        "to_ids": false,
        "type": "url",
        "uuid": "afb2d1a4-c709-4556-857d-bb0679eaee37",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/43684a696cd2c96496db75ba66df2484e941969e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T10:00:04+00:00",
        "timestamp": "1784368804",
        "to_ids": false,
        "type": "url",
        "uuid": "4e3d12e2-8918-4724-9326-aa18c2c7aa6f",
        "value": "https://x.com/smica83/status/2078393421476106614",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T10:00:04+00:00",
        "timestamp": "1784368805",
        "to_ids": true,
        "type": "domain",
        "uuid": "013b50fd-2fd5-43e5-b240-a24b45d84fed",
        "value": "pub-4ffc3db6ed2d4b3ca1d8eeda7e2431e3.r2.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T10:00:05+00:00",
        "timestamp": "1784368805",
        "to_ids": false,
        "type": "url",
        "uuid": "b875e7d2-10b4-4ac7-907e-c38089a49a2a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0ee034cf8bc9260e97979ef8d03492d949597ca7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T10:00:05+00:00",
        "timestamp": "1784368805",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ea0a142-8526-4239-a55c-ed9048a6d797",
        "value": "visa-nadra-gov-pk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:04+00:00",
        "timestamp": "1784372404",
        "to_ids": false,
        "type": "url",
        "uuid": "a87f8b08-081a-4b9f-9b94-ac729446d8a9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/872a3ece7409465bb672efa75abf390d50ab1342",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:04+00:00",
        "timestamp": "1784372404",
        "to_ids": true,
        "type": "domain",
        "uuid": "98bb49e5-ea11-43eb-ad7c-ce850a949f39",
        "value": "ncodgpcheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:04+00:00",
        "timestamp": "1784372404",
        "to_ids": true,
        "type": "domain",
        "uuid": "693686d6-7ad5-40bb-aeb3-cbad9dbf1886",
        "value": "ncodgppass.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:04+00:00",
        "timestamp": "1784372404",
        "to_ids": true,
        "type": "domain",
        "uuid": "df1471f9-93b5-4a60-9dd7-c63c1a8d875f",
        "value": "poltoast.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:04+00:00",
        "timestamp": "1784372404",
        "to_ids": false,
        "type": "url",
        "uuid": "5ade0bff-c3df-4ba1-8cfa-f9cca705fcc3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6234e7c27c1f78e8b096a157b2e545a3bb023b07",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:05+00:00",
        "timestamp": "1784372405",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ea5924d-186c-446a-863d-dd7bf3beed16",
        "value": "hohoho.rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:05+00:00",
        "timestamp": "1784372405",
        "to_ids": true,
        "type": "domain",
        "uuid": "279bf92c-09c3-4018-9757-5af8903505ae",
        "value": "huhuhu.rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:05+00:00",
        "timestamp": "1784372405",
        "to_ids": false,
        "type": "url",
        "uuid": "0bb99fca-0e74-4079-b627-8801764b1805",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/89b9fb0199676e1f3b78c2025134cdc5f802b2df",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:05+00:00",
        "timestamp": "1784372405",
        "to_ids": false,
        "type": "url",
        "uuid": "e3702d44-5bdd-4ac3-bdb7-00b26afc2daa",
        "value": "https://www.elastic.co/security-labs/contagious-interview-malware-svg-steganography",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:05+00:00",
        "timestamp": "1784372405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "cabdfea0-124c-468c-8fe2-cbce7397d6bd",
        "value": "188.40.64.61",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:06+00:00",
        "timestamp": "1784372406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "dde6f3dc-b586-4996-88ef-2813d93730f3",
        "value": "195.26.248.212",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:06+00:00",
        "timestamp": "1784372406",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b242287-e355-495a-b782-703df4d63e65",
        "value": "rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:06+00:00",
        "timestamp": "1784372406",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a171157-c515-4997-ac22-4821f631df7c",
        "value": "controller.rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:06+00:00",
        "timestamp": "1784372407",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0c3f662-5f43-4612-ad05-03a0bacf26fa",
        "value": "file.rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:07+00:00",
        "timestamp": "1784372407",
        "to_ids": true,
        "type": "domain",
        "uuid": "f05f2d18-c6b1-4276-abe0-f6f09178c565",
        "value": "ldb.rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T11:00:07+00:00",
        "timestamp": "1784372407",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bb7efef-79d4-4c0a-81da-2167a623a5ee",
        "value": "upload.rightwidth.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:03+00:00",
        "timestamp": "1784376004",
        "to_ids": false,
        "type": "url",
        "uuid": "954e4508-a418-4fb3-93c5-fb05ee83dd0c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2cc36a33ac27cfd87f4ca282d444dfeeb71895d4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:04+00:00",
        "timestamp": "1784376005",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9389d80-00c4-4bea-a354-2f3414f32390",
        "value": "security.ccocc.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:05+00:00",
        "timestamp": "1784376005",
        "to_ids": false,
        "type": "url",
        "uuid": "a6b11650-802f-49c1-88da-0fdc84867a68",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/aa233641fa73dc0f068ffd71ab5147baa8c0aa36",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:05+00:00",
        "timestamp": "1784376006",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2288995-f7a9-4eec-9dd8-2b54476d37b7",
        "value": "crsorgi.gov.in.ev2.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:06+00:00",
        "timestamp": "1784376006",
        "to_ids": true,
        "type": "domain",
        "uuid": "bea4a4a5-6f41-48c5-9151-76130b2fe15d",
        "value": "dc.crsorgi.gov.in.ev2.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:06+00:00",
        "timestamp": "1784376006",
        "to_ids": true,
        "type": "domain",
        "uuid": "89c243b0-89f6-405d-bde2-db895fc754e8",
        "value": "ev2.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:07+00:00",
        "timestamp": "1784376007",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1596ab6-93c6-4684-af04-a0b56d648e9b",
        "value": "gov.in.ev2.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T12:00:07+00:00",
        "timestamp": "1784376007",
        "to_ids": true,
        "type": "domain",
        "uuid": "7417f095-28ea-4fb7-914b-4c116e87c10c",
        "value": "in.ev2.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T18:00:03+00:00",
        "timestamp": "1784397603",
        "to_ids": false,
        "type": "url",
        "uuid": "4e0b0590-e036-4f14-bf7f-42a7926cfa78",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a946999a232728586743fe888af8babe8ede6185",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T18:00:03+00:00",
        "timestamp": "1784397604",
        "to_ids": false,
        "type": "url",
        "uuid": "c76edf04-d9f5-4be1-9bac-4ac9a3227487",
        "value": "https://www.virustotal.com/gui/ip-address/89.36.231.205/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T18:00:04+00:00",
        "timestamp": "1784397605",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbf2913a-f565-4c19-8e33-538a24bd7926",
        "value": "cdnabucket.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T18:00:05+00:00",
        "timestamp": "1784397605",
        "to_ids": true,
        "type": "domain",
        "uuid": "f582e691-5589-4b18-ac44-d7221aecd852",
        "value": "cdnbucket.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T18:00:05+00:00",
        "timestamp": "1784397605",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a9c1321-0c09-4259-bde7-41d65e4a8b5b",
        "value": "35.cdnabucket.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T18:00:05+00:00",
        "timestamp": "1784397605",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a836961-50e4-4e2f-bfbb-a38ade5176c0",
        "value": "5z.cdnbucket.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:04+00:00",
        "timestamp": "1784401204",
        "to_ids": false,
        "type": "url",
        "uuid": "8171b544-1c25-41a0-8c0b-3a8a46c03ffd",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3cbbc76eb961a8ecff58097f3d90f41b8592e6c6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:04+00:00",
        "timestamp": "1784401204",
        "to_ids": false,
        "type": "url",
        "uuid": "8c9ded31-f5df-420d-904f-141bafbacf45",
        "value": "https://www.virustotal.com/gui/ip-address/193.26.115.198/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:05+00:00",
        "timestamp": "1784401205",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a48dca2-7bc2-4b7e-b6b5-698226ec316b",
        "value": "mastermrc2.kozow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:05+00:00",
        "timestamp": "1784401205",
        "to_ids": true,
        "type": "domain",
        "uuid": "307b3ffe-430b-4701-88b5-45f982f0a322",
        "value": "purepower21.kozow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:05+00:00",
        "timestamp": "1784401205",
        "to_ids": false,
        "type": "url",
        "uuid": "66a34d8d-4b59-4e22-85ff-b65b5c946044",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/91a0e53e78d6b0db8072ed94b232142c6a0fb1e3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:05+00:00",
        "timestamp": "1784401205",
        "to_ids": false,
        "type": "url",
        "uuid": "6bab54bd-60a2-49b2-9818-3515ac45f00c",
        "value": "https://www.virustotal.com/gui/file/07c762a2d8aafe09729b3f29c83d3ce3eb8449c15839700940ceaaabcf62a239/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:05+00:00",
        "timestamp": "1784401205",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "de50f03f-06a9-4b8e-8ed9-37c97e01d16b",
        "value": "193.26.115.198",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vjw0rm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:05+00:00",
        "timestamp": "1784401206",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0843b26-3838-4018-9b0e-d8af51d64075",
        "value": "c2nuevpoder.kozow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:06+00:00",
        "timestamp": "1784401206",
        "to_ids": false,
        "type": "url",
        "uuid": "a1ad3466-9e51-43f2-ba67-61f21c9ed75d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5c49ce73db4c01c0b285b0938aec49dc2300f090",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:06+00:00",
        "timestamp": "1784401206",
        "to_ids": true,
        "type": "domain",
        "uuid": "27a43085-b88c-44f1-99b1-2bbf29088968",
        "value": "google.defenders.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T19:00:06+00:00",
        "timestamp": "1784401206",
        "to_ids": true,
        "type": "domain",
        "uuid": "0620b61d-d342-439c-aae0-733357bdee43",
        "value": "nextjs781.ngrok.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T20:00:02+00:00",
        "timestamp": "1784404803",
        "to_ids": false,
        "type": "url",
        "uuid": "7e40b7b8-3817-4be4-bade-179a5826b3b2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3754979f2ee5153c8ea58cebdd8b7fee72ac8796",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T20:00:03+00:00",
        "timestamp": "1784404803",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc8e7b60-940b-43bf-828f-d19473026c95",
        "value": "ciqbvu.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T22:00:02+00:00",
        "timestamp": "1784412003",
        "to_ids": false,
        "type": "url",
        "uuid": "a0a590b3-a404-47c6-924c-c12df7123127",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c339118a4d9a1e1c44444bfa8966a244f92d46a0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T22:00:03+00:00",
        "timestamp": "1784412004",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0a793b47-1572-4622-a45d-c8ebed56ef11",
        "value": "216.126.236.64",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T22:00:05+00:00",
        "timestamp": "1784412006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ac795bbb-c336-4ae5-ae4d-4bf7540fc5f6",
        "value": "91.90.121.87",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T22:00:06+00:00",
        "timestamp": "1784412006",
        "to_ids": true,
        "type": "domain",
        "uuid": "0823a41c-06a7-415a-88fe-1e3d46c0b19b",
        "value": "91.90.121.87.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-18T22:00:06+00:00",
        "timestamp": "1784412006",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c7e8e4b-f01e-43e6-ba30-3b1492edcade",
        "value": "talent-telusdigital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}