{ "Event": { "analysis": "1", "date": "2026-02-27", "extends_uuid": "", "info": "Maltrail IOC for 2026-02-27", "publish_timestamp": "1772233214", "published": false, "threat_level_id": "2", "timestamp": "1772464608", "uuid": "ca644701-62d1-4217-ada4-37452e8086db", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T08:00:02+00:00", "timestamp": "1772179204", "to_ids": false, "type": "url", "uuid": "c7298338-5be2-463f-ac8a-5303e1d0f107", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0646683ef79252a23e46ab0f0c2f5cd19622153a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T08:00:04+00:00", "timestamp": "1772179205", "to_ids": true, "type": "domain", "uuid": "f05b43de-339e-4fc2-bc8d-864ca36c2b93", "value": "rv-tools.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:03+00:00", "timestamp": "1772182804", "to_ids": false, "type": "url", "uuid": "2c646225-6a32-4cc9-9520-921961c7841b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ef8592c301ca981ee5e763e64a2799a42dfb624a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:04+00:00", "timestamp": "1772182805", "to_ids": true, "type": "domain", "uuid": "42ff6cf4-54e8-46cb-b51d-d08395426478", "value": "online.zitlex.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:05+00:00", "timestamp": "1772182805", "to_ids": true, "type": "domain", "uuid": "31e2321a-1e61-4a7a-90ec-9d6f8d25fb1a", "value": "zitlex.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:05+00:00", "timestamp": "1772182805", "to_ids": false, "type": "url", "uuid": "cf729e29-34eb-4998-8d93-3911ed3f5229", "value": "https://api.github.com/repos/stamparm/maltrail/commits/9b786d496f9492f593d4f4d4d65f55da0fe1f8ee", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:05+00:00", "timestamp": "1772182806", "to_ids": false, "type": "url", "uuid": "78f4fc61-cbef-452e-8ca6-609828615061", "value": "https://x.com/malwrhunterteam/status/2027011120574124509", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:06+00:00", "timestamp": "1772182806", "to_ids": false, "type": "url", "uuid": "5052aa47-9f2d-43da-a05e-831872ac7576", "value": "https://x.com/smica83/status/2027089623122403792", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:06+00:00", "timestamp": "1772182806", "to_ids": false, "type": "url", "uuid": "96e6bbba-4596-4f47-9cac-c105ff6c7e83", "value": "https://www.virustotal.com/gui/file/91a2945d99ee794a0461427a14ca731187b8143b847b85993ea7d5367c2c1c0c/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:06+00:00", "timestamp": "1772182806", "to_ids": true, "type": "domain", "uuid": "bba8a990-38c0-4e6e-b72f-b96f344df13d", "value": "msftconnecttest.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:06+00:00", "timestamp": "1772182806", "to_ids": true, "type": "domain", "uuid": "3a622126-370d-485b-bfc4-57a52782f826", "value": "a.msftconnecttest.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:06+00:00", "timestamp": "1772182806", "to_ids": true, "type": "domain", "uuid": "7fabd66e-8c70-45bf-b996-68bdde9d925f", "value": "asset.msftconnecttest.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182807", "to_ids": true, "type": "domain", "uuid": "46be74dd-8b46-460d-aff4-cf42399089fe", "value": "demo.msftconnecttest.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gorat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182807", "to_ids": true, "type": "domain", "uuid": "d03eecf7-f096-4414-af72-4b93114392fe", "value": "test.msftconnecttest.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182807", "to_ids": false, "type": "url", "uuid": "d63772a6-b0d0-44f2-886b-c2664507a6a4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a6a5d4fc2e913d96182c8ba9c1cf9296ae1d8c3e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182807", "to_ids": false, "type": "url", "uuid": "22d4836f-d586-4cef-be88-6aa67cf690cb", "value": "https://x.com/RedDrip7/status/2027209484784017629", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182807", "to_ids": false, "type": "url", "uuid": "0541c6cb-c6fd-457d-b8b5-e3fd67eb2eb1", "value": "https://www.virustotal.com/gui/file/e6b523e77c31b89f8eb3489007bf14b3b9d34bc3870a9d96ecf7b99efa506c76/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182807", "to_ids": true, "type": "ip-dst", "uuid": "db1834f5-2139-41f2-a021-ed538a040381", "value": "107.172.39.100", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:07+00:00", "timestamp": "1772182808", "to_ids": true, "type": "domain", "uuid": "d73bf14f-0eb7-48a1-8de3-95d5687d87d2", "value": "ashersoftlib.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:08+00:00", "timestamp": "1772182808", "to_ids": false, "type": "url", "uuid": "76eb8555-8906-4f46-8792-e8e11fc84584", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3f6f94d4cbe5ca9362428adb4dee7084d1cdd24b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T09:00:08+00:00", "timestamp": "1772182808", "to_ids": true, "type": "domain", "uuid": "edaa3c01-4f24-430d-9eff-34679fb9ca44", "value": "petitle.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:04+00:00", "timestamp": "1772186404", "to_ids": false, "type": "url", "uuid": "18e63ff1-d87f-4c66-a27d-71c917cd98ec", "value": "https://api.github.com/repos/stamparm/maltrail/commits/580ed2e5cc6de73363f5768a87fbdd3339dc2d7c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:04+00:00", "timestamp": "1772186404", "to_ids": false, "type": "url", "uuid": "a61d4467-e79c-4bc5-8fc3-72cd5b4e7743", "value": "https://www.virustotal.com/gui/file/d1bfeeffb9ce99d92afa5d76997222d616214c0df0a12a6099d09d8c94f1a1fa/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:05+00:00", "timestamp": "1772186405", "to_ids": true, "type": "domain", "uuid": "324a75d5-0c3d-48b6-9afa-c2f9bf5ee7bb", "value": "resistantmusic.shop", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "smokeloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:05+00:00", "timestamp": "1772186405", "to_ids": false, "type": "url", "uuid": "03f3a35a-0b79-41a2-898a-91cb75e6d989", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1aef6ec81fe3d2f652843e6dbe91455a2cd62f5c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "smokeloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:05+00:00", "timestamp": "1772186405", "to_ids": false, "type": "url", "uuid": "b3c72224-ec33-4362-a13d-ad2a141cc070", "value": "https://www.virustotal.com/gui/file/7e92a078f6f875b189bc4b2bca87f4f737eb2048356a51a1962f359b645d1b0f/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "smokeloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:06+00:00", "timestamp": "1772186406", "to_ids": true, "type": "domain", "uuid": "8dd3680a-448a-44af-a2ae-eeb70251cd26", "value": "dax.estate", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:06+00:00", "timestamp": "1772186406", "to_ids": false, "type": "url", "uuid": "74c74e97-f902-487f-8165-358644cc2fc5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/fc046d4c30e9cf55674bf051ff38d5ddd5ded3d6", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:06+00:00", "timestamp": "1772186406", "to_ids": false, "type": "url", "uuid": "640858ab-137e-4065-8c29-d0c77400dddc", "value": "https://x.com/volrant136/status/2027043925819896216", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:06+00:00", "timestamp": "1772186406", "to_ids": false, "type": "url", "uuid": "84855537-b3a9-4193-bb97-efff3d3d0f15", "value": "https://www.virustotal.com/gui/file/b2e9ef81af6c4686944e5c589d420fc9dffbf9af7afe3e1e913cece273626070/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:06+00:00", "timestamp": "1772186406", "to_ids": true, "type": "ip-dst", "uuid": "d6638afa-0503-4cf8-88b4-9df9fd02745c", "value": "185.82.202.150", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:06+00:00", "timestamp": "1772186407", "to_ids": true, "type": "ip-dst", "uuid": "bf28bfea-fea4-4f75-af17-3d135bb22153", "value": "162.19.214.220", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:07+00:00", "timestamp": "1772186407", "to_ids": true, "type": "domain", "uuid": "920e8b5f-dccd-41eb-b66d-f90e4518748a", "value": "162-19-214-220.eyeohost.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:07+00:00", "timestamp": "1772186407", "to_ids": true, "type": "domain", "uuid": "5237ff5d-6a20-4585-bd36-e05eebb1316b", "value": "162.19.214.220.sslip.io", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:07+00:00", "timestamp": "1772186407", "to_ids": true, "type": "domain", "uuid": "296f9b56-acb2-4ba2-9d7b-cf47eab8cac1", "value": "apostile.zapto.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:07+00:00", "timestamp": "1772186407", "to_ids": true, "type": "domain", "uuid": "e1c1d8a9-b379-4ec2-9d0f-37a9ce1939b1", "value": "googletranslate.zapto.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:07+00:00", "timestamp": "1772186407", "to_ids": true, "type": "domain", "uuid": "49d5dc74-a244-4f8b-bf90-e842d4857efb", "value": "behnam.strangled.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:07+00:00", "timestamp": "1772186408", "to_ids": true, "type": "domain", "uuid": "fd38e8e3-7bee-4f2e-9eba-3238b8261d35", "value": "phoenixnetwork2.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:08+00:00", "timestamp": "1772186408", "to_ids": false, "type": "url", "uuid": "af6ab6e5-c693-42ed-b56e-e3ddeee0dda2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d80f240b6a29965ab001b54937bd0551badb89b4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:08+00:00", "timestamp": "1772186408", "to_ids": false, "type": "url", "uuid": "1b42cab7-e37d-42d8-874c-155d10718c09", "value": "https://x.com/solostalking/status/2027059234941419597", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:08+00:00", "timestamp": "1772186408", "to_ids": true, "type": "domain", "uuid": "9d0b3bc6-88a2-4a90-acb8-0421f79a304b", "value": "fontfix-chrome.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:08+00:00", "timestamp": "1772186408", "to_ids": false, "type": "url", "uuid": "4b6ba39d-8bd1-4ac2-a738-fb9cd6f57483", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0b2c6651676f745850e5150528d491647cdb0f53", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:08+00:00", "timestamp": "1772186408", "to_ids": true, "type": "domain", "uuid": "df78dc79-b801-46e2-94c9-03e694b82594", "value": "alpha-glance-rz.tech", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:08+00:00", "timestamp": "1772186408", "to_ids": true, "type": "domain", "uuid": "1055cbc0-84ae-412e-b07c-177cce46ff87", "value": "chromium-report-tech-331as-2s1-tcd-h143.alpha-glance-rz.tech", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186409", "to_ids": true, "type": "domain", "uuid": "1a41f05d-5a65-4398-8c24-6705353d9082", "value": "doji-board-raz.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186409", "to_ids": false, "type": "url", "uuid": "05fe9f18-a3f0-4ee7-9e32-349e27d9afc7", "value": "https://api.github.com/repos/stamparm/maltrail/commits/032c33b2917a05e61f48ff99ab0faaf523441536", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186409", "to_ids": false, "type": "url", "uuid": "149ffd02-2bb9-4f36-bcb9-9754d88f77fb", "value": "https://x.com/g0njxa/status/2027082406847709524", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186409", "to_ids": false, "type": "url", "uuid": "38c8a0d9-5295-4861-a57d-9255762b7ebc", "value": "https://www.virustotal.com/gui/file/30427b6732fea64c2cdc0b40c19695902f2bdea5f87dab16b4082bb3cf208557/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186409", "to_ids": true, "type": "domain", "uuid": "49c4fc6c-79b5-4567-b143-092e0d24ad2a", "value": "beekeeperstudio-db.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186409", "to_ids": true, "type": "domain", "uuid": "237cffca-0436-4b26-825f-10392d0515b8", "value": "beekeeperstudio.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:09+00:00", "timestamp": "1772186410", "to_ids": true, "type": "domain", "uuid": "ebc77c69-89dc-4234-8491-b4966ba29594", "value": "beekeeperstudio.co", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:10+00:00", "timestamp": "1772186410", "to_ids": true, "type": "domain", "uuid": "0881a851-d1e8-4db1-8b31-da63b6e1532f", "value": "beekeeperstudio.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:10+00:00", "timestamp": "1772186410", "to_ids": true, "type": "domain", "uuid": "57ffec9d-f775-4faf-9ee6-25c1daae9587", "value": "beekeeperstudio.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:10+00:00", "timestamp": "1772186410", "to_ids": true, "type": "domain", "uuid": "a4591271-e5a6-4924-93c2-6b92a496ccf1", "value": "beekeeperstudio.tech", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:10+00:00", "timestamp": "1772186410", "to_ids": true, "type": "domain", "uuid": "2694d79f-78b5-4f1f-b58c-e06579ae4743", "value": "computerservicesource.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:10+00:00", "timestamp": "1772186410", "to_ids": true, "type": "domain", "uuid": "8b4847a7-2385-4d31-946d-e6bef12337dc", "value": "dbeaver-database.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:10+00:00", "timestamp": "1772186411", "to_ids": true, "type": "domain", "uuid": "50ea282b-cfc9-4669-b783-1474f7def50f", "value": "dbeaver-database.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:11+00:00", "timestamp": "1772186411", "to_ids": true, "type": "domain", "uuid": "d69bbfd3-1c71-4369-b2a1-e0bd98356b30", "value": "dbeaver-database.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:11+00:00", "timestamp": "1772186411", "to_ids": true, "type": "domain", "uuid": "c5997d79-a4db-4ef7-ae80-908655e5250f", "value": "dbeaver-database.co", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:11+00:00", "timestamp": "1772186411", "to_ids": true, "type": "domain", "uuid": "30b838b8-ed9c-4b95-ab2c-c011750f8e1b", "value": "dbeaver-database.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:11+00:00", "timestamp": "1772186411", "to_ids": true, "type": "domain", "uuid": "f024624c-8513-43e0-8aa3-49bf736121a8", "value": "dbeaver-database.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:11+00:00", "timestamp": "1772186411", "to_ids": true, "type": "domain", "uuid": "922051d9-ee23-4304-9264-d253045a0975", "value": "dbeaver-database.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:11+00:00", "timestamp": "1772186412", "to_ids": true, "type": "domain", "uuid": "78e6d9db-e2ac-43ca-99b6-cf2356c3a292", "value": "dbeaver-database.tech", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:12+00:00", "timestamp": "1772186412", "to_ids": true, "type": "domain", "uuid": "defb2c0f-df2f-4266-8fba-c5ea415d494c", "value": "dbeaver-database.us", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:12+00:00", "timestamp": "1772186412", "to_ids": true, "type": "domain", "uuid": "d9be65b2-fb74-499b-9ab9-63f4e2f1dd0d", "value": "heidisql-enterprise.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:12+00:00", "timestamp": "1772186412", "to_ids": true, "type": "domain", "uuid": "6efacbee-d425-4ed2-8aa5-46a0e849443b", "value": "heidisql-enterprise.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:12+00:00", "timestamp": "1772186412", "to_ids": true, "type": "domain", "uuid": "581247c0-9c34-44ee-bb3a-77e9d780eef3", "value": "heidisql-enterprise.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:12+00:00", "timestamp": "1772186412", "to_ids": true, "type": "domain", "uuid": "5d90dd66-c635-43c0-9ccc-a639fe593588", "value": "heidisql-enterprise.co", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:12+00:00", "timestamp": "1772186413", "to_ids": true, "type": "domain", "uuid": "7b06f58c-f08e-44a9-9fe7-9a6e0a384477", "value": "heidisql-enterprise.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:13+00:00", "timestamp": "1772186413", "to_ids": true, "type": "domain", "uuid": "808c7a2f-f321-4b5c-8acd-5c7a6ab0957e", "value": "heidisql-enterprise.ltd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:13+00:00", "timestamp": "1772186413", "to_ids": true, "type": "domain", "uuid": "8615d543-fabb-4fe9-b391-0f56bfac3413", "value": "heidisql-enterprise.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:13+00:00", "timestamp": "1772186413", "to_ids": true, "type": "domain", "uuid": "718a4c3e-203d-4de8-9be2-4f4bec383803", "value": "heidisql-enterprise.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:13+00:00", "timestamp": "1772186413", "to_ids": true, "type": "domain", "uuid": "b2f473c5-58c0-49ba-8b65-731af5835902", "value": "heidisql-enterprise.tech", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:13+00:00", "timestamp": "1772186413", "to_ids": true, "type": "domain", "uuid": "996e835c-32f0-482b-80ee-328c1692ff6f", "value": "heidisql-enterprise.us", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:13+00:00", "timestamp": "1772186414", "to_ids": true, "type": "domain", "uuid": "1756a114-38e4-4a8b-bff9-2c719b1cacbe", "value": "heidisql.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:14+00:00", "timestamp": "1772186414", "to_ids": true, "type": "domain", "uuid": "8cafb295-2cf3-49e6-9e90-e2297a6caf9c", "value": "nmap.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:14+00:00", "timestamp": "1772186414", "to_ids": true, "type": "domain", "uuid": "b7f6c41f-300e-428d-969b-ed07c0e6377d", "value": "rvtools-dev.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:14+00:00", "timestamp": "1772186414", "to_ids": true, "type": "domain", "uuid": "4c0c1ce5-0379-4745-9d2c-549a20347253", "value": "rvtools-skillcamp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:14+00:00", "timestamp": "1772186414", "to_ids": true, "type": "domain", "uuid": "637a6240-bd66-472f-afa7-509399151486", "value": "rvtools.link", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:14+00:00", "timestamp": "1772186414", "to_ids": true, "type": "domain", "uuid": "fe359bb3-8220-44d9-a9f8-ee99dfe677cb", "value": "softwarep2p.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:14+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "25f40bc0-de01-41d4-9e67-1ffcd964cf4e", "value": "vmware-rvtools.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "c218e6a4-4ad5-4a0e-b6eb-f4730bcafd01", "value": "vmware-rvtools.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "60f4479f-2555-45ef-9381-682b424662c8", "value": "vmware-rvtools.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "ec0c7d68-69a9-48c7-892f-a382bdf568e9", "value": "vmware-rvtools.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "9bbba84f-4d24-45e4-af17-27f3832bd6db", "value": "vmware-rvtools.ltd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "6ca2f05a-37fc-4685-809a-8feae8317f0e", "value": "vmware-rvtools.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186415", "to_ids": true, "type": "domain", "uuid": "91faac43-f46e-4925-b7d5-72a8de1aa632", "value": "vmware-rvtools.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:15+00:00", "timestamp": "1772186416", "to_ids": true, "type": "domain", "uuid": "ba93174e-5775-49a3-974a-0269286f9a3e", "value": "vmware-rvtools.tech", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:16+00:00", "timestamp": "1772186416", "to_ids": true, "type": "domain", "uuid": "78846cb4-f658-4029-b32c-847ee834a1e2", "value": "vmware-rvtools.us", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:16+00:00", "timestamp": "1772186416", "to_ids": true, "type": "domain", "uuid": "d23b2a38-26ca-4e6f-a039-1a17e153d5a2", "value": "beekeeperstudio.softwarep2p.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:16+00:00", "timestamp": "1772186416", "to_ids": true, "type": "domain", "uuid": "78e21682-33fe-40bf-91ba-1e00753277e3", "value": "dbeaver.softwarep2p.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:16+00:00", "timestamp": "1772186416", "to_ids": true, "type": "domain", "uuid": "9564d3ac-537a-422c-a5b2-8c272f5d390e", "value": "download.rvtools-dev.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:16+00:00", "timestamp": "1772186416", "to_ids": true, "type": "domain", "uuid": "3e99425f-9b30-4918-a33e-1b31d060e864", "value": "download.rvtools-skillcamp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:16+00:00", "timestamp": "1772186417", "to_ids": true, "type": "domain", "uuid": "9271b68b-3ecb-4c57-ba06-26c0fb79c6a9", "value": "nmap.softwarep2p.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T10:00:17+00:00", "timestamp": "1772186417", "to_ids": true, "type": "domain", "uuid": "54390a79-ca0f-4032-b06b-ff3b78760b41", "value": "rvtools.softwarep2p.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:04+00:00", "timestamp": "1772190005", "to_ids": false, "type": "url", "uuid": "5144ae72-d4ca-41d6-96b9-58195ed02852", "value": "https://api.github.com/repos/stamparm/maltrail/commits/74c61d633c2eb017465ce1b7646c2f872175ae41", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:05+00:00", "timestamp": "1772190005", "to_ids": true, "type": "domain", "uuid": "41a4cf74-e738-4bff-bda5-243a85a6cd5e", "value": "control-profile4.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:05+00:00", "timestamp": "1772190005", "to_ids": true, "type": "domain", "uuid": "d659a251-574d-4cef-b1be-97272c6f4fb8", "value": "dapps-exchange.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:05+00:00", "timestamp": "1772190006", "to_ids": true, "type": "domain", "uuid": "e63715ff-540b-448c-b41a-4bdc4450c521", "value": "kunde-commerzbank.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:06+00:00", "timestamp": "1772190006", "to_ids": true, "type": "domain", "uuid": "990958b5-1396-4291-bda4-b5256f5f63b1", "value": "mijnfluviubeheer.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:06+00:00", "timestamp": "1772190006", "to_ids": true, "type": "domain", "uuid": "6ac7719e-7b30-40fa-ae32-1f9cec9182e6", "value": "mrelay-infocolis.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:06+00:00", "timestamp": "1772190006", "to_ids": true, "type": "domain", "uuid": "cd883b60-abed-44bc-a192-caf468aac4e1", "value": "neofinancial-auth.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:06+00:00", "timestamp": "1772190006", "to_ids": false, "type": "url", "uuid": "22b7be34-f493-4088-a7a2-87569c56e671", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3c6c4f689af3ec7e6f24f87b35a37f4099b65569", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:06+00:00", "timestamp": "1772190006", "to_ids": true, "type": "ip-dst", "uuid": "e2955531-8a60-46c1-a796-004bd39aa6a6", "value": "35.78.231.220", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:06+00:00", "timestamp": "1772190007", "to_ids": true, "type": "ip-dst", "uuid": "62003066-3b2e-4549-846a-7d3bf781840c", "value": "38.165.42.12", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:07+00:00", "timestamp": "1772190007", "to_ids": true, "type": "ip-dst", "uuid": "11aad269-f286-4a6f-a149-a67d085baabe", "value": "45.113.1.204", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:07+00:00", "timestamp": "1772190007", "to_ids": true, "type": "ip-dst", "uuid": "fd9ca1d3-461f-4be8-96b0-59f35c0dcc40", "value": "64.81.30.195", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:07+00:00", "timestamp": "1772190007", "to_ids": false, "type": "url", "uuid": "9d028267-dc70-4a17-a56e-95b2d3d517f9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e9623bfbd172be2f96469a10dde8e27981257fa0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:07+00:00", "timestamp": "1772190007", "to_ids": true, "type": "ip-dst", "uuid": "847ed2dc-e158-4db5-a240-119d17e2d7f3", "value": "141.98.7.177", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:07+00:00", "timestamp": "1772190007", "to_ids": true, "type": "ip-dst", "uuid": "d1438f44-2300-4e9c-8e2f-c908dd01fd64", "value": "179.61.145.140", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:08+00:00", "timestamp": "1772190008", "to_ids": true, "type": "ip-dst", "uuid": "039959d6-4496-4029-837f-1d6e67aaa243", "value": "193.5.65.119", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:08+00:00", "timestamp": "1772190008", "to_ids": true, "type": "ip-dst", "uuid": "29b1c29e-8379-47af-9bd0-c6f3f30d0785", "value": "78.46.66.146", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:08+00:00", "timestamp": "1772190008", "to_ids": false, "type": "url", "uuid": "d5ac0f8b-0da5-416f-8ee2-10ffb345da9b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c318d0436c65b48f13d1843c5b25df90af33213d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:08+00:00", "timestamp": "1772190009", "to_ids": true, "type": "domain", "uuid": "72fb50cf-5df5-41da-a262-1b728898c708", "value": "xotca.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:09+00:00", "timestamp": "1772190009", "to_ids": false, "type": "url", "uuid": "342dcf5e-d4b8-410a-849f-94847ee6d5c9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/45feac2ab60ae548370394c0e3f8d96ac03b4e31", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:09+00:00", "timestamp": "1772190009", "to_ids": false, "type": "url", "uuid": "88789559-b4fc-44c5-ab70-9691286468a8", "value": "https://www.virustotal.com/gui/file/90f2b095eb3b4dd8b484cc50a3501601891d242e715cdc88bc1def44ef891fd5/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:09+00:00", "timestamp": "1772190009", "to_ids": false, "type": "url", "uuid": "f34746df-5f2e-4ad8-9b7c-dbcad2f98cb9", "value": "https://www.virustotal.com/gui/file/07131e3fcb9e65c1e4d2e756efdb9f263fd90080d3ff83fbcca1f31a4890ebdb/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:09+00:00", "timestamp": "1772190009", "to_ids": false, "type": "url", "uuid": "76cb40db-f5ac-4eab-9b7e-4048ca5c4373", "value": "https://www.virustotal.com/gui/file/50e8f85878234db719b27099ed389426f0c25e78bcce9814226c3b3d55ec99fa/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:09+00:00", "timestamp": "1772190009", "to_ids": false, "type": "url", "uuid": "02709fec-3637-4140-84ae-65d70a40ef03", "value": "https://www.virustotal.com/gui/file/65229ef9d09e4cbfae326d41c517576cc2143c259fd764f259f3925fc8917c8b/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:09+00:00", "timestamp": "1772190009", "to_ids": false, "type": "url", "uuid": "865eedc6-33fe-409b-bb32-a3829d1ad5f9", "value": "https://www.virustotal.com/gui/file/ae5bbb7cb9cc6da0947f65add264d421f90bd3ea04bc85035f23b615cb7be56e/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:10+00:00", "timestamp": "1772190010", "to_ids": true, "type": "ip-dst", "uuid": "6e3bcff0-c829-4fcf-8a7e-e20e08b6646d", "value": "212.227.65.132", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:10+00:00", "timestamp": "1772190010", "to_ids": true, "type": "domain", "uuid": "4d4c51a0-cf09-4725-a9c1-f2d356e36177", "value": "pylex.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:10+00:00", "timestamp": "1772190011", "to_ids": true, "type": "domain", "uuid": "dfb076e3-a231-4976-9d25-523205399f90", "value": "thor.pylex.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:11+00:00", "timestamp": "1772190011", "to_ids": true, "type": "domain", "uuid": "8b09f826-dafd-483a-9d65-bc313a0323c2", "value": "wintr.pylex.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "python_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:11+00:00", "timestamp": "1772190011", "to_ids": true, "type": "domain", "uuid": "18983e89-b809-4e0a-930b-ee1ac04a9b58", "value": "melo.pylex.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:11+00:00", "timestamp": "1772190011", "to_ids": false, "type": "url", "uuid": "224304e7-7d41-40ff-883c-82bc5d432fe1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/40957fdc420272df142da97aea5cab94fa2151b7", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:11+00:00", "timestamp": "1772190011", "to_ids": false, "type": "url", "uuid": "9fffa68c-093e-429a-a686-342e97f67913", "value": "https://x.com/smica83/status/2027321348641419634", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:11+00:00", "timestamp": "1772190011", "to_ids": true, "type": "domain", "uuid": "414b2462-9150-4890-951d-dbd415c621e9", "value": "workflow-rest-wars-cargo.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:11+00:00", "timestamp": "1772190012", "to_ids": false, "type": "url", "uuid": "9510a3a1-6fdf-4856-a875-e5adccfcb3af", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8f741ef2319a71e7fdd4535399e57722426e1baa", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190012", "to_ids": false, "type": "url", "uuid": "c541f4f8-1a1b-4c28-9f1b-8d95eed90202", "value": "https://x.com/tuckner/status/2027129670693495262", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190012", "to_ids": false, "type": "url", "uuid": "9ed43e86-c216-46ef-b229-17f88561dbe0", "value": "https://annex.security/blog/pixel-perfect", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190012", "to_ids": true, "type": "domain", "uuid": "ca9c18e8-17f4-4bc2-beed-95c1fd001d26", "value": "bookrave.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190012", "to_ids": true, "type": "domain", "uuid": "202cfd57-c54f-4d73-af6e-9a61b0444ee3", "value": "browser-extension.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190012", "to_ids": true, "type": "domain", "uuid": "9f2a9a0c-9dc9-452e-aa40-e7a21eca1ed4", "value": "doodlebuggle.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190012", "to_ids": true, "type": "domain", "uuid": "8da30fc1-84e9-4aef-9c64-6e347fcad756", "value": "extension-12dq.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:12+00:00", "timestamp": "1772190013", "to_ids": true, "type": "domain", "uuid": "d52abbb8-619b-4907-8c1b-66df604fee60", "value": "extension-studio.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:13+00:00", "timestamp": "1772190013", "to_ids": true, "type": "domain", "uuid": "372b7a03-3478-4ac9-80e5-055027c6341b", "value": "extension.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:13+00:00", "timestamp": "1772190013", "to_ids": true, "type": "domain", "uuid": "68e231a1-afe2-4d4a-9475-7197ce9f7ea8", "value": "extensionanalytics.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:13+00:00", "timestamp": "1772190013", "to_ids": true, "type": "domain", "uuid": "1acafc84-1d86-4630-b634-b1577bfc9ce8", "value": "extensionanalyticscenter.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:13+00:00", "timestamp": "1772190013", "to_ids": true, "type": "domain", "uuid": "f510a03e-82f0-4f2b-bc8d-649c40096c10", "value": "extensionanalyticspro.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:13+00:00", "timestamp": "1772190013", "to_ids": true, "type": "domain", "uuid": "dafdaea1-b1e9-4959-9cf5-928ac2ac1b7a", "value": "extensioncentre.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:13+00:00", "timestamp": "1772190014", "to_ids": true, "type": "domain", "uuid": "6f691711-d63f-4960-ad31-ef6deebe9065", "value": "getextensionanalytics.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:14+00:00", "timestamp": "1772190014", "to_ids": true, "type": "domain", "uuid": "7f3cc431-ddca-44c9-97a9-2360b9f3d64e", "value": "kowqlak.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:14+00:00", "timestamp": "1772190014", "to_ids": true, "type": "domain", "uuid": "086f6cc0-5485-4e2b-9bcc-57a95c2c17ab", "value": "slerok.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:14+00:00", "timestamp": "1772190014", "to_ids": true, "type": "domain", "uuid": "39c06aea-0087-4c60-af83-b3fa3e6567c6", "value": "api.extension-12dq.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:14+00:00", "timestamp": "1772190014", "to_ids": true, "type": "domain", "uuid": "ed94f9fc-0523-42d8-9237-2cebc980d8ed", "value": "api.extension-studio.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:14+00:00", "timestamp": "1772190014", "to_ids": true, "type": "domain", "uuid": "e9a5ba59-c5c5-4fde-8ff2-de6c9051b0d9", "value": "api.extension.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:14+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "2e627176-1502-460f-9794-050cc1c1bacd", "value": "api.extensionanalytics.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:15+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "377fc7c6-91ef-4ef2-8ab3-d4e385686262", "value": "api.extensionanalyticscenter.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:15+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "9cf99638-9067-4b3f-82db-4497f6688b85", "value": "api.extensionanalyticspro.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:15+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "8d1d4878-ea04-48a5-a1c0-d4bde92b1f87", "value": "api.extensioncentre.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:15+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "7bcf169d-a469-47e1-b3be-23b00aa06854", "value": "api.getextensionanalytics.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:15+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "990b6749-5eaa-4321-8982-dad6fc73d043", "value": "api.slerok.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T11:00:15+00:00", "timestamp": "1772190015", "to_ids": true, "type": "domain", "uuid": "07dcd167-7081-4921-ae3c-e71ad85a999f", "value": "ws.extensionanalyticspro.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:04+00:00", "timestamp": "1772193605", "to_ids": false, "type": "url", "uuid": "f299d4c5-417f-4ec9-895c-6cff825c4e65", "value": "https://api.github.com/repos/stamparm/maltrail/commits/beb190e455a03c309301507e2fef1aff26fec6d1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:05+00:00", "timestamp": "1772193605", "to_ids": true, "type": "domain", "uuid": "44fb57ba-4a8a-44a9-a170-4f9799f4a43e", "value": "hk.heying168.dpdns.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:05+00:00", "timestamp": "1772193606", "to_ids": false, "type": "url", "uuid": "927ff246-8341-472c-9d4f-c25ab6912870", "value": "https://api.github.com/repos/stamparm/maltrail/commits/046507b1605fc4fff7fbda4ca00c288c666772ed", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:06+00:00", "timestamp": "1772193606", "to_ids": false, "type": "url", "uuid": "f4de539d-e32d-4205-b7c7-655424841ffc", "value": "https://x.com/780thC/status/2027014144646594734", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:06+00:00", "timestamp": "1772193606", "to_ids": false, "type": "url", "uuid": "efb1a322-6803-4bd6-9271-91729fdcc753", "value": "https://lab52.io/blog/plugx-meeting-invitation-via-msbuild-and-gdata", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:06+00:00", "timestamp": "1772193607", "to_ids": false, "type": "url", "uuid": "b920e005-fdd4-413c-8d12-d42c512424c4", "value": "https://www.virustotal.com/gui/file/d0eeef1b864c653c59242e0e90c87c24da440555217dfdda815e0b53a24c6336/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:07+00:00", "timestamp": "1772193607", "to_ids": true, "type": "domain", "uuid": "f0ad133e-fdbf-4876-b20f-8b64191d7b80", "value": "decoraat.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:07+00:00", "timestamp": "1772193607", "to_ids": true, "type": "domain", "uuid": "d81acd70-b79b-449b-a8e2-6452954cc6dc", "value": "gesecole.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "plugx", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:07+00:00", "timestamp": "1772193607", "to_ids": true, "type": "domain", "uuid": "054971a8-7011-4b5e-acf0-eef1eb1484e1", "value": "onedow.gesecole.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:07+00:00", "timestamp": "1772193607", "to_ids": false, "type": "url", "uuid": "726cfe4b-c2fd-4b18-8ed4-e6bf12fda70b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f8eeb640dc4067b3be0774bef05604143027c6bb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:07+00:00", "timestamp": "1772193607", "to_ids": true, "type": "domain", "uuid": "413eae6d-9ba9-4d32-94c5-f65d384e54de", "value": "303mattress.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:07+00:00", "timestamp": "1772193608", "to_ids": true, "type": "domain", "uuid": "97be13b6-5be0-4864-90e0-2cd2f3318f26", "value": "demaled.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:08+00:00", "timestamp": "1772193608", "to_ids": true, "type": "domain", "uuid": "46a19de8-6a83-4baa-bf9b-a6378bef860a", "value": "frolicforlife.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:08+00:00", "timestamp": "1772193608", "to_ids": true, "type": "domain", "uuid": "62b84d2d-8434-49f9-8c8c-82baf506e7f5", "value": "lilhomo.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:08+00:00", "timestamp": "1772193608", "to_ids": true, "type": "domain", "uuid": "41e2371d-b345-424e-befe-51e3c5234fcb", "value": "moltbot-io.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:08+00:00", "timestamp": "1772193608", "to_ids": true, "type": "domain", "uuid": "b441e4de-6414-4239-bdb3-ca56fd489c26", "value": "nivitv.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:08+00:00", "timestamp": "1772193608", "to_ids": true, "type": "domain", "uuid": "9f033947-0740-48cd-aea6-9cb201ac71db", "value": "simpelecapp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:08+00:00", "timestamp": "1772193609", "to_ids": true, "type": "domain", "uuid": "7b989fa2-d4c4-4781-baea-b53590b4a3b2", "value": "dev.simpelecapp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:09+00:00", "timestamp": "1772193609", "to_ids": true, "type": "domain", "uuid": "4ccbc523-c23c-4b32-8051-b162365ba29c", "value": "get.moltbot-io.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:09+00:00", "timestamp": "1772193609", "to_ids": false, "type": "url", "uuid": "2e1756c8-118b-4b96-8d7f-83510f81c834", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8af1be6c7241bf5efa3a40ac4a01623fa85e8106", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:09+00:00", "timestamp": "1772193609", "to_ids": true, "type": "domain", "uuid": "d29637d8-7b07-4b0c-803a-8005e32c5513", "value": "filemintednode.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:09+00:00", "timestamp": "1772193609", "to_ids": true, "type": "domain", "uuid": "28bfc9ea-d678-4f90-9bbf-e73563c6204e", "value": "filezenithsync.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:09+00:00", "timestamp": "1772193609", "to_ids": false, "type": "url", "uuid": "9afc360a-fd4c-4bb2-8f46-cf8ae0e942af", "value": "https://api.github.com/repos/stamparm/maltrail/commits/9e32234844778ee037dc03b0bbb34382984ace80", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:09+00:00", "timestamp": "1772193610", "to_ids": false, "type": "url", "uuid": "1a0073d6-4f5a-4565-89a0-cccb72460197", "value": "https://x.com/osint_barbie/status/2027258678978433419", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:10+00:00", "timestamp": "1772193610", "to_ids": false, "type": "url", "uuid": "87bb5ee4-4cf2-47f4-a7b0-b20d33395e65", "value": "https://x.com/osint_barbie/status/2027258760507334982", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:10+00:00", "timestamp": "1772193610", "to_ids": true, "type": "domain", "uuid": "ec57f532-ca90-4857-ad46-d08cdb25df64", "value": "advanceddreams.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:10+00:00", "timestamp": "1772193610", "to_ids": true, "type": "domain", "uuid": "49bf8ae9-bbbc-4852-bcb2-781c6fb358f4", "value": "apps-tahoe.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:10+00:00", "timestamp": "1772193610", "to_ids": true, "type": "domain", "uuid": "d9f7bb8f-abc7-40af-81b5-03e0628c43ca", "value": "axisjam.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:10+00:00", "timestamp": "1772193610", "to_ids": true, "type": "domain", "uuid": "f5309bb7-857e-4760-bd71-6b8af140fbdb", "value": "babyspedia.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:10+00:00", "timestamp": "1772193611", "to_ids": true, "type": "domain", "uuid": "ebb4613a-208e-4e52-b306-4594865b724b", "value": "benaadironline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:11+00:00", "timestamp": "1772193611", "to_ids": true, "type": "domain", "uuid": "5857959f-0e9a-44fa-b24a-5b403eb04e37", "value": "bermavidrio.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:11+00:00", "timestamp": "1772193611", "to_ids": true, "type": "domain", "uuid": "8198a314-2ab9-405f-8c50-0509fe69856b", "value": "bestoralcarebd.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:11+00:00", "timestamp": "1772193611", "to_ids": true, "type": "domain", "uuid": "11d0c53f-ade0-421e-b3d7-c947a5457399", "value": "bewitchydating.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:11+00:00", "timestamp": "1772193611", "to_ids": true, "type": "domain", "uuid": "79128ba3-33db-42ae-9389-8906562a0766", "value": "bonjourdoll.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:11+00:00", "timestamp": "1772193611", "to_ids": true, "type": "domain", "uuid": "4a1ef171-aa81-44ab-8e6d-4b17b2725b87", "value": "bquickautotransport.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193612", "to_ids": true, "type": "domain", "uuid": "b473d763-4b8a-4bc9-8164-9ccde8bb1205", "value": "broganfund.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193612", "to_ids": true, "type": "domain", "uuid": "863218f9-b194-4c96-91a8-2343ef8e0686", "value": "camdenhine.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193612", "to_ids": true, "type": "domain", "uuid": "f96fea26-d40d-4b97-80ef-b3d87e6bd9ff", "value": "cardio-d3fence.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193612", "to_ids": true, "type": "domain", "uuid": "048ea68e-fa4a-4e60-abe0-f57e0d355862", "value": "celebratudespedida.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193612", "to_ids": true, "type": "domain", "uuid": "e24d131c-94ee-438e-bfc9-399152112aab", "value": "coco-fun2.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193612", "to_ids": true, "type": "domain", "uuid": "f74c21a5-2a66-4d75-9084-98c58b50d057", "value": "dharmikrami.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:12+00:00", "timestamp": "1772193613", "to_ids": true, "type": "domain", "uuid": "b61b71c3-b60e-4b2d-b3c8-0dc9a29f558f", "value": "espootapump.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:13+00:00", "timestamp": "1772193613", "to_ids": true, "type": "domain", "uuid": "fbd983ec-8917-4d39-aabd-22ad9a14c8b4", "value": "evanyalabs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:13+00:00", "timestamp": "1772193613", "to_ids": true, "type": "domain", "uuid": "ff8de34b-410b-44d7-9601-0635e4c85ff3", "value": "femaleledworld.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:13+00:00", "timestamp": "1772193613", "to_ids": true, "type": "domain", "uuid": "03ce1d23-819c-437a-88c8-e17891eb3858", "value": "get-mac-downloader.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:13+00:00", "timestamp": "1772193613", "to_ids": true, "type": "domain", "uuid": "51696650-6ad6-4ecc-8b6f-8afce2ed8f0a", "value": "getpaidtoshipcars.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:13+00:00", "timestamp": "1772193614", "to_ids": true, "type": "domain", "uuid": "1a9826ad-4d39-4c84-b365-0c08d505476c", "value": "henleyscleaning.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:14+00:00", "timestamp": "1772193614", "to_ids": true, "type": "domain", "uuid": "bb85285d-8952-4635-8543-f27eeccc7848", "value": "holoxworldwide.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:14+00:00", "timestamp": "1772193614", "to_ids": true, "type": "domain", "uuid": "a17c22dc-6a75-4a9b-bed9-a6bd461c97d4", "value": "hombressimbolicos.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:14+00:00", "timestamp": "1772193614", "to_ids": true, "type": "domain", "uuid": "f1b2d5e8-f871-4f5c-9b01-a3e8ceaa8905", "value": "huntforwhitetails.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:14+00:00", "timestamp": "1772193614", "to_ids": true, "type": "domain", "uuid": "d629a5d8-98f7-4d98-bf93-76c91a488451", "value": "icreaeditorial.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:14+00:00", "timestamp": "1772193614", "to_ids": true, "type": "domain", "uuid": "9529112c-bb7d-4443-b529-53842d17d063", "value": "ideafactorydesign.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:14+00:00", "timestamp": "1772193615", "to_ids": true, "type": "domain", "uuid": "bfd4c2af-86da-4c6e-b646-d35ee56fcac1", "value": "ihcdn.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:15+00:00", "timestamp": "1772193615", "to_ids": true, "type": "domain", "uuid": "d78159d5-5da6-470a-8d4a-0b01afc79966", "value": "ikaaudio.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:15+00:00", "timestamp": "1772193615", "to_ids": true, "type": "domain", "uuid": "1cc06326-a09b-4083-a6a6-80e4ca3c2e6b", "value": "ikasan.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:15+00:00", "timestamp": "1772193615", "to_ids": true, "type": "domain", "uuid": "25a14b7d-8110-40cb-a043-e350e52b9987", "value": "infinitydental-us.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:15+00:00", "timestamp": "1772193615", "to_ids": true, "type": "domain", "uuid": "446cd07d-beff-495a-b399-67f344680a17", "value": "ironmanjosh.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:15+00:00", "timestamp": "1772193615", "to_ids": true, "type": "domain", "uuid": "15ce7d4d-c988-44d0-9000-ef0b6ca100b7", "value": "iyalojacoop.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:15+00:00", "timestamp": "1772193616", "to_ids": true, "type": "domain", "uuid": "88dd2f03-e8a4-4481-a9ec-692e6805527e", "value": "jetkonnect.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:16+00:00", "timestamp": "1772193616", "to_ids": true, "type": "domain", "uuid": "66c11c2b-daa8-4171-bc54-e717b52f43b0", "value": "jjdevelopment3.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:16+00:00", "timestamp": "1772193616", "to_ids": true, "type": "domain", "uuid": "9074ff30-14e0-4e1d-b0c1-3adbc66ff658", "value": "justjivie.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:16+00:00", "timestamp": "1772193616", "to_ids": true, "type": "domain", "uuid": "a1bef354-3047-44a5-a811-e127d86e4794", "value": "lamestjamal.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:16+00:00", "timestamp": "1772193616", "to_ids": true, "type": "domain", "uuid": "1f0a84ce-2ec9-4357-963b-5f53409af029", "value": "lnvilinbe.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:16+00:00", "timestamp": "1772193616", "to_ids": true, "type": "domain", "uuid": "fb8772f1-3c92-4037-8116-26fc6665e53f", "value": "lumier-x.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:16+00:00", "timestamp": "1772193617", "to_ids": true, "type": "domain", "uuid": "2d1e1292-4023-4772-8bb9-ea69a3201f6b", "value": "luzicleaning.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:17+00:00", "timestamp": "1772193617", "to_ids": true, "type": "domain", "uuid": "e35962a9-836d-4b9a-8a82-251f56b87371", "value": "marineso.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:17+00:00", "timestamp": "1772193617", "to_ids": true, "type": "domain", "uuid": "33fd1acb-5cf3-43c5-8e61-deb710df28e7", "value": "maryambinfahad.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:17+00:00", "timestamp": "1772193617", "to_ids": true, "type": "domain", "uuid": "0d94f19b-1fee-4967-b342-0f567161d7c1", "value": "maryannelatanyshyn.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:17+00:00", "timestamp": "1772193617", "to_ids": true, "type": "domain", "uuid": "a956cd2e-ebfa-43cb-b989-4aa1968d1f9c", "value": "maxysai.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:17+00:00", "timestamp": "1772193617", "to_ids": true, "type": "domain", "uuid": "fd4d2f19-ece9-4722-8b7b-305276920c16", "value": "missisoft.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:17+00:00", "timestamp": "1772193618", "to_ids": true, "type": "domain", "uuid": "6fbb26a1-2c7e-47bc-8695-d7a4d22bd59b", "value": "moalam.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:18+00:00", "timestamp": "1772193618", "to_ids": true, "type": "domain", "uuid": "5001d8a5-a30b-4502-abfb-ecbbcc4a227f", "value": "muhibul.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:18+00:00", "timestamp": "1772193618", "to_ids": true, "type": "domain", "uuid": "1eb35297-0552-49d9-9bbf-578869724b45", "value": "neighborsaver.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:18+00:00", "timestamp": "1772193618", "to_ids": true, "type": "domain", "uuid": "2deb67eb-0c18-4316-9fc4-fb494914b155", "value": "netro-stmen.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:18+00:00", "timestamp": "1772193618", "to_ids": true, "type": "domain", "uuid": "cd7bbbb9-60a5-4658-b8ce-60805456e752", "value": "noorets4so.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:18+00:00", "timestamp": "1772193618", "to_ids": true, "type": "domain", "uuid": "377aa870-9495-4184-9928-3d0644e513b6", "value": "nwesfactory.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:18+00:00", "timestamp": "1772193619", "to_ids": true, "type": "domain", "uuid": "943a1cd2-e52a-489b-88a9-f835a5a7b355", "value": "osmac-get.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:19+00:00", "timestamp": "1772193619", "to_ids": true, "type": "domain", "uuid": "6ec004f1-d206-40b4-b475-51e09933d8e9", "value": "paulocruzes.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:19+00:00", "timestamp": "1772193619", "to_ids": true, "type": "domain", "uuid": "d34486c4-ee48-42e3-a17d-73167b3d013c", "value": "purefellowship.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:19+00:00", "timestamp": "1772193619", "to_ids": true, "type": "domain", "uuid": "a0cd14bb-bd9d-40c9-80af-440ec13d2233", "value": "rampageactive.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:19+00:00", "timestamp": "1772193619", "to_ids": true, "type": "domain", "uuid": "0e5faffc-d777-418f-8acb-b5bfe0e697e5", "value": "readingtheneedle.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:19+00:00", "timestamp": "1772193619", "to_ids": true, "type": "domain", "uuid": "d1f738a7-73e8-41a4-942b-e13ec6112e6e", "value": "restorationsmedia.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:19+00:00", "timestamp": "1772193620", "to_ids": true, "type": "domain", "uuid": "044ccd24-29bd-455a-b32b-baa13f5d14d3", "value": "rileycrabtreemusic.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:20+00:00", "timestamp": "1772193620", "to_ids": true, "type": "domain", "uuid": "951c0360-cac2-4413-811c-871a49cf971e", "value": "rollencharlies.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:20+00:00", "timestamp": "1772193620", "to_ids": true, "type": "domain", "uuid": "1db16cff-93aa-40ef-8444-bf850504ebfe", "value": "shinygemlight.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:20+00:00", "timestamp": "1772193620", "to_ids": true, "type": "domain", "uuid": "0b3fe016-191b-4e47-b176-3156d3ff9f4d", "value": "simmiddleeast.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:20+00:00", "timestamp": "1772193620", "to_ids": true, "type": "domain", "uuid": "6a182cfe-86f3-4ac9-9558-3835ab704864", "value": "stumbleandstirbeautybar.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:20+00:00", "timestamp": "1772193620", "to_ids": true, "type": "domain", "uuid": "f0a61530-5925-4c92-8398-877b40fb87f6", "value": "thefirstfollow.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:20+00:00", "timestamp": "1772193621", "to_ids": true, "type": "domain", "uuid": "4245413f-7d99-48d7-992a-8543a1b39cd5", "value": "thevipstay.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:21+00:00", "timestamp": "1772193621", "to_ids": true, "type": "domain", "uuid": "649be70a-1d47-4c3b-a78e-26196b6545bc", "value": "trackprotech.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:21+00:00", "timestamp": "1772193621", "to_ids": true, "type": "domain", "uuid": "da5aeb3a-deec-466d-b1fa-dd0f61a5279a", "value": "tradingview-terminal.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:21+00:00", "timestamp": "1772193621", "to_ids": true, "type": "domain", "uuid": "ac8161be-fee0-497a-b78d-df57fe179789", "value": "tri2s-sh7es.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:21+00:00", "timestamp": "1772193621", "to_ids": true, "type": "domain", "uuid": "87864413-e521-406b-8381-9f7cc716a47f", "value": "valpem.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:21+00:00", "timestamp": "1772193621", "to_ids": true, "type": "domain", "uuid": "93ee8f91-b485-4aa3-9c71-a18f78f8d552", "value": "watchzmall.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:21+00:00", "timestamp": "1772193622", "to_ids": true, "type": "domain", "uuid": "fcff2381-c10a-4a36-9616-90b0b96f6ae6", "value": "whattodoincusco.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:22+00:00", "timestamp": "1772193622", "to_ids": true, "type": "domain", "uuid": "e564febf-8688-49f4-8f68-1a88ed82b68d", "value": "whywetlandmatters.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:22+00:00", "timestamp": "1772193622", "to_ids": true, "type": "domain", "uuid": "2be5c374-2e83-4946-a994-0392b03307f4", "value": "workingspells.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:22+00:00", "timestamp": "1772193622", "to_ids": true, "type": "domain", "uuid": "cf9b1cf7-0f67-4f9f-b96c-67cfe170f75a", "value": "wowirishtours.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:22+00:00", "timestamp": "1772193622", "to_ids": true, "type": "domain", "uuid": "fbb3f618-d088-4db3-886c-eb5e77f4b72f", "value": "xhifting.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:22+00:00", "timestamp": "1772193623", "to_ids": true, "type": "domain", "uuid": "f1e3e9d3-692b-4358-b5ce-bf0edae5d8c7", "value": "xpressdispatchers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:23+00:00", "timestamp": "1772193623", "to_ids": true, "type": "domain", "uuid": "c324a02d-01cf-4a36-95c5-b97e350ab033", "value": "yourenergyispower.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:23+00:00", "timestamp": "1772193623", "to_ids": true, "type": "domain", "uuid": "c4eb7f95-1a58-493a-8ae7-a36fe6dbacb9", "value": "zeeklyons.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:23+00:00", "timestamp": "1772193623", "to_ids": true, "type": "domain", "uuid": "d4a190b8-e18b-4856-851c-3b069c7a3ade", "value": "a.apps-tahoe.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:23+00:00", "timestamp": "1772193623", "to_ids": true, "type": "domain", "uuid": "923ee37a-5b44-4964-8114-756a4495b25e", "value": "a.get-mac-downloader.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:23+00:00", "timestamp": "1772193623", "to_ids": true, "type": "domain", "uuid": "759971db-7952-4238-9c94-b351a616784f", "value": "a.netro-stmen.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:23+00:00", "timestamp": "1772193624", "to_ids": true, "type": "domain", "uuid": "65df3608-02cb-4663-b102-fa054c284fed", "value": "a.osmac-get.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:24+00:00", "timestamp": "1772193624", "to_ids": true, "type": "domain", "uuid": "685edca2-bd92-4b20-8131-3e68b70c34e8", "value": "b.apps-tahoe.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T12:00:24+00:00", "timestamp": "1772193624", "to_ids": true, "type": "domain", "uuid": "031bff63-34d7-4d23-b4b5-8f54c23124ec", "value": "b.netro-stmen.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:03+00:00", "timestamp": "1772197204", "to_ids": false, "type": "url", "uuid": "46f68422-94b0-4684-9b89-bf0558ebe676", "value": "https://api.github.com/repos/stamparm/maltrail/commits/287e7cad45c263e0bd8625f1ac6562b634ae5ff2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:04+00:00", "timestamp": "1772197205", "to_ids": true, "type": "domain", "uuid": "eb7d3297-ff8b-4548-94a9-00559f8f1358", "value": "database-lists.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:05+00:00", "timestamp": "1772197205", "to_ids": true, "type": "domain", "uuid": "044ad49e-48f3-4dfc-8f64-12c72d56335c", "value": "heidisql.database-lists.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:05+00:00", "timestamp": "1772197205", "to_ids": false, "type": "url", "uuid": "d7d0c401-7469-426c-a982-e718099e8391", "value": "https://api.github.com/repos/stamparm/maltrail/commits/17691826c77ac512dce449a8a335bf26c035dc18", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:05+00:00", "timestamp": "1772197206", "to_ids": true, "type": "domain", "uuid": "575203ec-0e5c-476a-a554-727223f26848", "value": "vmwarevelocity.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:06+00:00", "timestamp": "1772197206", "to_ids": true, "type": "domain", "uuid": "525635cc-73a3-4709-afa3-4972b3d44869", "value": "rvtools.vmwarevelocity.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:06+00:00", "timestamp": "1772197206", "to_ids": false, "type": "url", "uuid": "b5280f81-6cdc-42c5-8505-71e94594a02c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/460f87669f823bc1a2faffac94437f072a0b62dd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:06+00:00", "timestamp": "1772197206", "to_ids": true, "type": "ip-dst", "uuid": "a7b3c3bb-589f-450e-96b7-0ec4d6db09a3", "value": "101.43.106.66", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T13:00:06+00:00", "timestamp": "1772197206", "to_ids": true, "type": "ip-dst", "uuid": "2233e8f4-3958-49d5-977b-71314289b0c4", "value": "81.70.144.252", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:02+00:00", "timestamp": "1772200803", "to_ids": false, "type": "url", "uuid": "a9707ea7-d6fa-4c02-bbe1-0dccee4afe3d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/94f775970d17c5cdc6d236edb5f87a4f01910fbb", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:03+00:00", "timestamp": "1772200804", "to_ids": false, "type": "url", "uuid": "c5d469a2-6778-476d-9042-1a02b418e366", "value": "https://www.virustotal.com/gui/ip-address/85.12.205.35/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:04+00:00", "timestamp": "1772200805", "to_ids": true, "type": "ip-dst", "uuid": "bf515476-9d14-420f-84d7-bf0c03cee879", "value": "85.12.205.35", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:05+00:00", "timestamp": "1772200805", "to_ids": false, "type": "url", "uuid": "1036f2df-2c2e-4876-ba5d-b06d1441286f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1098aac99b275aea870b6d7a49e25380e08dd769", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:05+00:00", "timestamp": "1772200805", "to_ids": true, "type": "domain", "uuid": "e32e0e4e-4124-402e-80bc-31c60c83cac8", "value": "auroracloudhub1.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:05+00:00", "timestamp": "1772200805", "to_ids": true, "type": "domain", "uuid": "2dd4e1fc-22da-4889-abbe-7617f2f6f730", "value": "auroracloudhub1.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:05+00:00", "timestamp": "1772200805", "to_ids": true, "type": "domain", "uuid": "81afc5ba-d12f-4ce3-b44a-f3bfa626567d", "value": "auroracloudhub1.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:06+00:00", "timestamp": "1772200806", "to_ids": true, "type": "domain", "uuid": "f161b1ef-e6df-49c1-9443-79ad290b458b", "value": "auroracloudhub2.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:06+00:00", "timestamp": "1772200806", "to_ids": true, "type": "domain", "uuid": "cb26b629-429f-4bb2-8605-9669c093e3e3", "value": "auroracloudhub2.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:06+00:00", "timestamp": "1772200806", "to_ids": true, "type": "domain", "uuid": "091e3b13-948a-4c16-9b2c-bad44efe6953", "value": "auroracloudhub2.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:06+00:00", "timestamp": "1772200806", "to_ids": true, "type": "domain", "uuid": "e6611eb8-4752-4887-9249-fbf975bee176", "value": "auroracloudhub3.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:06+00:00", "timestamp": "1772200806", "to_ids": true, "type": "domain", "uuid": "a23f37c9-9cd7-4dc4-9a29-f2518505efba", "value": "auroracloudhub3.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:06+00:00", "timestamp": "1772200807", "to_ids": true, "type": "domain", "uuid": "0f83a51b-92b1-4c31-aa02-74bfa30134dc", "value": "auroracloudhub3.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:07+00:00", "timestamp": "1772200807", "to_ids": true, "type": "domain", "uuid": "b819fb94-f079-45d5-bc9e-9811974baaad", "value": "auroracloudhub3.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:07+00:00", "timestamp": "1772200807", "to_ids": true, "type": "domain", "uuid": "99d532e2-5b31-471a-aa0c-b0075e51c00a", "value": "auroracloudhub4.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:07+00:00", "timestamp": "1772200807", "to_ids": true, "type": "domain", "uuid": "1f5563f6-3b4a-4713-aafd-a718f1e42d2d", "value": "auroracloudhub4.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:07+00:00", "timestamp": "1772200807", "to_ids": true, "type": "domain", "uuid": "b1894a48-f2c0-44c6-ac3b-09cbd2b61ea5", "value": "orbitdatadepot1.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:07+00:00", "timestamp": "1772200807", "to_ids": true, "type": "domain", "uuid": "1da10aa7-864b-43f9-82d1-230bbe0dbd9d", "value": "orbitdatadepot1.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:07+00:00", "timestamp": "1772200808", "to_ids": true, "type": "domain", "uuid": "dbb9cfa9-9443-4eed-b561-b8d42f369314", "value": "orbitdatadepot1.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:08+00:00", "timestamp": "1772200808", "to_ids": true, "type": "domain", "uuid": "f8437710-d113-4313-98d5-5b9085af3a5d", "value": "orbitdatadepot2.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:08+00:00", "timestamp": "1772200808", "to_ids": true, "type": "domain", "uuid": "9a87afa1-f982-4ea5-acf5-77e1a4bd8fe0", "value": "orbitdatadepot2.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:08+00:00", "timestamp": "1772200808", "to_ids": true, "type": "domain", "uuid": "6ad32f1f-2fb5-4818-abde-1c52b24120c3", "value": "orbitdatadepot2.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:08+00:00", "timestamp": "1772200808", "to_ids": true, "type": "domain", "uuid": "46c613a7-1d26-456c-9193-e42dae5f508a", "value": "orbitdatadepot3.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:08+00:00", "timestamp": "1772200808", "to_ids": true, "type": "domain", "uuid": "5b78d4f0-5463-4672-a313-3fe11695051b", "value": "orbitdatadepot3.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:08+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "52d34188-dd8c-412a-9672-3efeb1a78581", "value": "orbitdatadepot3.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:09+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "af87acf1-ef18-4005-80a8-93e759189b2e", "value": "orbitdatadepot4.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:09+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "5493ec2e-60a3-44be-ba43-509ce6832005", "value": "orbitdatadepot4.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:09+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "937d3f7e-553f-4e3d-95d6-8f857142c266", "value": "orbitdatadepot4.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:09+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "b68f7b41-d2d2-4249-9dad-fc2952869663", "value": "orbitdatadepot4.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:09+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "380812d3-cff9-476a-8bc9-4c7e8e6f5e09", "value": "orbitdatadepot4.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:09+00:00", "timestamp": "1772200809", "to_ids": true, "type": "domain", "uuid": "04760021-1650-4a21-b4f9-8545da4829d1", "value": "orbitdatadepot5.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200810", "to_ids": true, "type": "domain", "uuid": "71b578a5-5b45-4d77-9f09-2a2b967ec1db", "value": "orbitdatadepot5.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200810", "to_ids": true, "type": "domain", "uuid": "2783c338-ee20-4c0a-9ab3-9a7a1eb2b47b", "value": "orbitdatadepot5.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200810", "to_ids": true, "type": "domain", "uuid": "3c835de2-fe9d-4738-bcca-16d279bba034", "value": "orbitdatadepot5.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200810", "to_ids": true, "type": "domain", "uuid": "c7d29621-1af4-4abb-974c-a915f4aa1f37", "value": "orbitdatadepot5.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200810", "to_ids": true, "type": "domain", "uuid": "db2acf25-b0c7-4b27-88a2-b3258910e91b", "value": "orbitdatadepot5.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200810", "to_ids": true, "type": "domain", "uuid": "4aee4908-4d2f-468b-882b-3149d2e95817", "value": "orbitkazmatrix.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:10+00:00", "timestamp": "1772200811", "to_ids": true, "type": "domain", "uuid": "ef0e056e-3336-4c37-be5a-bd44f0e06a19", "value": "quantumdataserver1.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:11+00:00", "timestamp": "1772200811", "to_ids": true, "type": "domain", "uuid": "9f51cafe-146f-4b26-bc12-014e9e1c5edc", "value": "quantumdataserver1.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:11+00:00", "timestamp": "1772200811", "to_ids": true, "type": "domain", "uuid": "2d44901e-f9a0-4b89-8457-d0667f9ada3c", "value": "quantumdataserver1.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:11+00:00", "timestamp": "1772200811", "to_ids": true, "type": "domain", "uuid": "5e3437cf-f76f-4627-986c-e581ce4dd29e", "value": "quantumdataserver1.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:11+00:00", "timestamp": "1772200811", "to_ids": true, "type": "domain", "uuid": "d930fc6b-d34e-4e0a-8bfa-cac6487c473b", "value": "quantumdataserver1.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:11+00:00", "timestamp": "1772200811", "to_ids": true, "type": "domain", "uuid": "aae5c0d0-5845-441f-a081-e8fc64cd298b", "value": "quantumdataserver1.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:11+00:00", "timestamp": "1772200812", "to_ids": true, "type": "domain", "uuid": "43ca554a-47ab-4e5e-89b4-28b972adf4ce", "value": "quantumdataserver1.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:12+00:00", "timestamp": "1772200812", "to_ids": true, "type": "domain", "uuid": "de40a329-f525-4f9b-bc54-5b9169572ef7", "value": "quantumdataserver2.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:12+00:00", "timestamp": "1772200812", "to_ids": true, "type": "domain", "uuid": "8d49c325-1819-4f55-9ea7-87c0a669c46b", "value": "quantumdataserver3.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:12+00:00", "timestamp": "1772200812", "to_ids": true, "type": "domain", "uuid": "54cb58bb-1366-4903-a045-46ef0d6eb867", "value": "quantumdataserver3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:12+00:00", "timestamp": "1772200812", "to_ids": true, "type": "domain", "uuid": "f244b1e5-e537-4f49-8656-33729bf5d1ca", "value": "quantumdataserver4.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:12+00:00", "timestamp": "1772200812", "to_ids": true, "type": "domain", "uuid": "02db0b73-2d9e-4fcd-a19e-afd5fc72de30", "value": "quantumdataserver4.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:12+00:00", "timestamp": "1772200813", "to_ids": true, "type": "domain", "uuid": "8681b37f-15f3-44dc-9583-33c2f453eba3", "value": "quantumdataserver4.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:13+00:00", "timestamp": "1772200813", "to_ids": true, "type": "domain", "uuid": "aa8132d9-c9d1-4c75-84b6-dacb99c631c2", "value": "quantumdataserver4.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:13+00:00", "timestamp": "1772200813", "to_ids": true, "type": "domain", "uuid": "712f7c07-0fdd-48c1-abb9-276f46199ecb", "value": "quantumdataserver4.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:13+00:00", "timestamp": "1772200813", "to_ids": true, "type": "domain", "uuid": "f8d578df-39e5-408d-b61a-f66d6072288f", "value": "quantumdataserver5.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:13+00:00", "timestamp": "1772200813", "to_ids": true, "type": "domain", "uuid": "d2972e80-fcd6-4156-9351-3d7cfe393b75", "value": "quantumdataserver5.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:13+00:00", "timestamp": "1772200813", "to_ids": true, "type": "domain", "uuid": "9316c7b9-98cd-419d-80c5-879f047becf4", "value": "rapidfilevault1.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:14+00:00", "timestamp": "1772200814", "to_ids": true, "type": "domain", "uuid": "66b70b49-f884-4032-8a9c-a3a967d2579e", "value": "rapidfilevault1.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:14+00:00", "timestamp": "1772200814", "to_ids": true, "type": "domain", "uuid": "238e5b39-8ef3-4a80-ba77-af08ee43ed31", "value": "rapidfilevault1.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:14+00:00", "timestamp": "1772200814", "to_ids": true, "type": "domain", "uuid": "677b6c2c-6a0c-40b3-b672-225cc04f22b1", "value": "rapidfilevault1.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:14+00:00", "timestamp": "1772200814", "to_ids": true, "type": "domain", "uuid": "1cc44b72-8453-44e9-9b7f-d45e2980c7de", "value": "rapidfilevault2.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:14+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "96f190c4-f32d-4ddb-b071-1d90212a17f0", "value": "rapidfilevault2.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "1a61dcd3-c6e2-4d0b-86d3-3f22aaec2af7", "value": "rapidfilevault2.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "02e4ba09-16a3-4acc-9cb8-aa010a748ae0", "value": "rapidfilevault3.homes", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "b9a14828-9ce1-4472-b58f-b62596ff241f", "value": "rapidfilevault3.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "227d791b-8494-4e9f-9262-c2991ec3358e", "value": "rapidfilevault3.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "ce8c7dbe-e8a8-40f4-997b-70940de1b3c3", "value": "rapidfilevault3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200815", "to_ids": true, "type": "domain", "uuid": "b78ae373-0a49-44a4-ae4d-838d4ef0043c", "value": "rapidfilevault4.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:15+00:00", "timestamp": "1772200816", "to_ids": true, "type": "domain", "uuid": "90d925e3-cd2a-41a3-9e33-22838fc510d9", "value": "rapidfilevault4.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:16+00:00", "timestamp": "1772200816", "to_ids": true, "type": "domain", "uuid": "a7f3bf04-5eb4-41cb-b4a3-492ca733f34d", "value": "rapidfilevault4.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T14:00:16+00:00", "timestamp": "1772200816", "to_ids": true, "type": "domain", "uuid": "de3d6a8c-5dc2-40e8-8613-3e2bd2c816f3", "value": "rapidfilevault5.baby", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:03+00:00", "timestamp": "1772204404", "to_ids": false, "type": "url", "uuid": "3f86a96a-fb00-4815-aa48-2d8d77da6615", "value": "https://api.github.com/repos/stamparm/maltrail/commits/ec8342b15abddc237e1b999c04072fc4b5f43ac3", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:04+00:00", "timestamp": "1772204405", "to_ids": false, "type": "url", "uuid": "81bd0faa-f831-4f06-9a48-68d30b7ab853", "value": "https://www.enki.co.kr/en/media-center/blog/contagious-interview-campaign-abusing-vscode-distributed-on-github", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:05+00:00", "timestamp": "1772204405", "to_ids": true, "type": "domain", "uuid": "b994d4e0-8751-4351-b231-34470a34af1c", "value": "vscodesettings03kui.vercel.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:05+00:00", "timestamp": "1772204406", "to_ids": false, "type": "url", "uuid": "f0f689e8-4abd-4c55-b217-1213aebdb4fd", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0e066b2b2daac5880207b573683196ae43c1c20b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:06+00:00", "timestamp": "1772204406", "to_ids": false, "type": "url", "uuid": "bd727ab4-93e1-49bb-bd4e-082c14fc1fff", "value": "https://x.com/byrne_emmy12099/status/2027362636669812866", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:06+00:00", "timestamp": "1772204406", "to_ids": false, "type": "url", "uuid": "13ac801d-7cfb-4453-98fa-50277281c1ec", "value": "https://www.virustotal.com/gui/file/1fd4cdad8d32dc17513b4e4a79f42c9d616e5268d63ed497a43aea0669e50c00/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:06+00:00", "timestamp": "1772204406", "to_ids": true, "type": "ip-dst", "uuid": "2d898825-3fd3-4c11-b265-6ee0823580c8", "value": "107.189.24.28", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:06+00:00", "timestamp": "1772204406", "to_ids": true, "type": "domain", "uuid": "ba519f96-9d6e-4fa6-9508-c063fafa7634", "value": "107-189-24-28.cprapid.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:07+00:00", "timestamp": "1772204407", "to_ids": true, "type": "domain", "uuid": "cb14139c-1686-41b2-bd4c-ababd4d96093", "value": "107.189.24.28.sslip.io", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:07+00:00", "timestamp": "1772204407", "to_ids": true, "type": "domain", "uuid": "ede8078b-0841-4800-9546-afad975beb3d", "value": "conform.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:07+00:00", "timestamp": "1772204407", "to_ids": true, "type": "domain", "uuid": "75c2e565-ab12-4dcf-b22a-908b759d774f", "value": "contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:07+00:00", "timestamp": "1772204407", "to_ids": true, "type": "domain", "uuid": "1cb614c6-7369-46db-8cbf-cbadc83c8945", "value": "layer5043.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:07+00:00", "timestamp": "1772204407", "to_ids": true, "type": "domain", "uuid": "227cb4ff-18c2-448d-beab-e23cda5ee750", "value": "websites.ink", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:07+00:00", "timestamp": "1772204408", "to_ids": true, "type": "domain", "uuid": "a79d7f5b-f7a0-4204-8178-7712e77c147b", "value": "admin.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:08+00:00", "timestamp": "1772204408", "to_ids": true, "type": "domain", "uuid": "cc11359b-b534-444f-808b-b0ce757ae3a0", "value": "api.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:08+00:00", "timestamp": "1772204408", "to_ids": true, "type": "domain", "uuid": "72a3a377-428f-4c63-8c1d-5c1333775160", "value": "api.websites.ink", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:08+00:00", "timestamp": "1772204408", "to_ids": true, "type": "domain", "uuid": "c5c6a90d-f19b-465f-b433-4833e47bbb10", "value": "app.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:08+00:00", "timestamp": "1772204408", "to_ids": true, "type": "domain", "uuid": "6cebacb4-55aa-4a95-b904-3ac1eea1654a", "value": "backend.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:08+00:00", "timestamp": "1772204408", "to_ids": true, "type": "domain", "uuid": "4cb4470f-124c-419b-a64b-19e9f28c6778", "value": "demo.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:08+00:00", "timestamp": "1772204409", "to_ids": true, "type": "domain", "uuid": "93f1fc61-f9a2-44db-9c29-0f0468318bce", "value": "demo.websites.ink", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:09+00:00", "timestamp": "1772204409", "to_ids": true, "type": "domain", "uuid": "023d6e33-5b22-4dee-a0d4-d3bf774aa792", "value": "dev.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:09+00:00", "timestamp": "1772204409", "to_ids": true, "type": "domain", "uuid": "a6403ec3-4149-4753-b623-0058b1ddf782", "value": "staging.contras.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:09+00:00", "timestamp": "1772204409", "to_ids": false, "type": "url", "uuid": "5cc7ce98-4cee-444f-8b64-4362e178ca03", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3512fa9f3229d7079bd9af31eb6f6b87b48519b3", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:09+00:00", "timestamp": "1772204409", "to_ids": false, "type": "url", "uuid": "533e8079-fb84-4c15-b6ac-0a294c3a9ed6", "value": "https://x.com/smica83/status/2027366771783557194", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:09+00:00", "timestamp": "1772204409", "to_ids": false, "type": "url", "uuid": "f6fdaf95-3699-45d1-a442-7f0fd3b10730", "value": "https://www.virustotal.com/gui/file/cd973f4aa8d847341e0aac04ca5f4c2e06ae22a8e5ec7dcdbd0d281f3dbc9cc5/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:09+00:00", "timestamp": "1772204410", "to_ids": false, "type": "url", "uuid": "21130422-dd4f-49c8-9b5d-efbd7e8a3cbe", "value": "https://www.virustotal.com/gui/file/bf967d084a8397a8e5d18550bbffcb8b4727ee1ca69786b5cc4246326518e0cf/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:10+00:00", "timestamp": "1772204410", "to_ids": false, "type": "url", "uuid": "f72c25a1-54d0-438d-afbe-d6a17aa430b8", "value": "https://www.virustotal.com/gui/file/171eba62ff1726c421e64868ee492710ba274a7f4d5b1ec5e1835431fb0ab0d5/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:10+00:00", "timestamp": "1772204410", "to_ids": false, "type": "url", "uuid": "b895d2e3-27f2-41e3-b877-18533cca2050", "value": "https://www.virustotal.com/gui/file/3a15e0ed7f7a7419108511f28c80f1d7670860d8198335d57f4a1d350ff0715f/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:10+00:00", "timestamp": "1772204410", "to_ids": true, "type": "domain", "uuid": "7267deff-d465-47a8-9a03-872737040200", "value": "eszja.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:10+00:00", "timestamp": "1772204410", "to_ids": true, "type": "domain", "uuid": "3784ddbb-f5bb-468a-8652-afa90da750ec", "value": "eszja.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:10+00:00", "timestamp": "1772204411", "to_ids": true, "type": "domain", "uuid": "69d1dcba-ec08-4740-99ae-01a81ab776fb", "value": "nav.domains", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204411", "to_ids": true, "type": "domain", "uuid": "cd62db6f-0997-4001-9394-0554c1932b3b", "value": "tokenad.io", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204411", "to_ids": true, "type": "domain", "uuid": "b48f9494-08ad-4549-bd10-673a5384e8dc", "value": "eszja.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204411", "to_ids": true, "type": "domain", "uuid": "a60adb56-d478-47c2-ae2b-3f8f15241435", "value": "eszjagov.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204411", "to_ids": true, "type": "domain", "uuid": "522fb4f4-d9b1-4ea3-b45d-2b856f053be2", "value": "nav.eszja.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_37", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204411", "to_ids": false, "type": "url", "uuid": "698ce620-bbfb-4e46-9488-2139f698a636", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c89cb01b23ca317314109279a0097af4fc049a95", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_37", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204411", "to_ids": false, "type": "url", "uuid": "c772785d-d784-4d51-95bc-aeb9ace97805", "value": "https://www.symantec.com/security_response/writeup.jsp?docid=2016-063014-0934-99&tabid=2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_37", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T15:00:11+00:00", "timestamp": "1772204412", "to_ids": true, "type": "domain", "uuid": "d60180ec-d92e-47e6-a9c7-c8c6c274e64c", "value": "sync.appchecks.rr.nu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:03+00:00", "timestamp": "1772208003", "to_ids": false, "type": "url", "uuid": "ecc90e67-d1cb-4673-b2b6-799546ba4161", "value": "https://api.github.com/repos/stamparm/maltrail/commits/957889921c73511202c7e7cc69876fd2c2d8f65d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:03+00:00", "timestamp": "1772208003", "to_ids": false, "type": "url", "uuid": "f367e87f-82be-4b17-b4fa-a9d5e865b125", "value": "https://x.com/MsftSecIntel/status/2027070355487997998", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:03+00:00", "timestamp": "1772208004", "to_ids": false, "type": "url", "uuid": "69ad5005-667b-4f40-b6b1-b5ae7034ffcd", "value": "https://www.virustotal.com/gui/file/1d5bea0ae5facf0159f35ea0bead65369ceb83942cc7073cb459ff06c6f82f0b/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:04+00:00", "timestamp": "1772208005", "to_ids": false, "type": "url", "uuid": "ce6cfaa2-15dd-490d-9264-2c812d5b1475", "value": "https://www.virustotal.com/gui/file/4442ba4c60a6fc24a2b2dfd041a86f601e03b38deab0300a6116fea68042003f/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:05+00:00", "timestamp": "1772208005", "to_ids": false, "type": "url", "uuid": "41348217-97c4-4e8a-881b-20f2e5421076", "value": "https://www.virustotal.com/gui/file/48cd5d1ef968bf024fc6a1a119083893b4191565dba59592c541eb77358a8cbb/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:05+00:00", "timestamp": "1772208005", "to_ids": false, "type": "url", "uuid": "23906521-27a5-4021-adaa-4165715ff832", "value": "https://www.virustotal.com/gui/file/564e232aa72d92dfc2af74cf7b413d5a369c5ce3b2c533d8b27f7318904a44e8/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:05+00:00", "timestamp": "1772208005", "to_ids": false, "type": "url", "uuid": "da441f3b-88ff-4201-af60-dd0983ee0533", "value": "https://www.virustotal.com/gui/file/d181384ee2049c95bc343951950b1d9f7356423cae0f636ba2015a906aecbf3d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:05+00:00", "timestamp": "1772208006", "to_ids": true, "type": "ip-dst", "uuid": "d0174d10-2b3e-4a67-b514-769ead391284", "value": "79.110.49.15", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "javarat", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:06+00:00", "timestamp": "1772464608", "to_ids": true, "type": "domain", "uuid": "2ce09e5d-7816-4a0f-8b1d-34540c570590", "value": "powercat.dog", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:06+00:00", "timestamp": "1772208006", "to_ids": false, "type": "url", "uuid": "63d9ccf8-517b-40d2-a463-d2ba8be658fd", "value": "https://api.github.com/repos/stamparm/maltrail/commits/581e04f24109f660cf5b0f3e3ccd1d63ecbf3a7b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:06+00:00", "timestamp": "1772208006", "to_ids": false, "type": "url", "uuid": "ace54d1b-6f35-4294-a0af-1c59a63d3269", "value": "https://blog.talosintelligence.com/new-dohdoor-malware-campaign", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:06+00:00", "timestamp": "1772208006", "to_ids": false, "type": "url", "uuid": "651964a3-36d5-4c30-8bb4-3acdef127386", "value": "https://github.com/Cisco-Talos/IOCs/blob/main/2026/02/new-dohdoor-malware-campaign.txt", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:07+00:00", "timestamp": "1772208007", "to_ids": false, "type": "url", "uuid": "cafb5868-6502-42a9-8472-b3c332b99500", "value": "https://www.virustotal.com/gui/file/54e18978c6405f56cd59ba55a62291436639f21cf325ae509f0599b15e8f7f53/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:07+00:00", "timestamp": "1772208007", "to_ids": false, "type": "url", "uuid": "24c1122e-8db2-4c8d-9820-33f7ec69c0cd", "value": "https://www.virustotal.com/gui/file/0bb130b1fafb17705d31fe5dd25e7b2d62176578609d75cc57911ef5582ef17a/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:07+00:00", "timestamp": "1772208007", "to_ids": false, "type": "url", "uuid": "7d55e7f4-8da5-4558-a2d5-d6e81c6f55cc", "value": "https://www.virustotal.com/gui/file/54545fa3a2d8da6746021812ebaa9d26f33bba4f63c6f7f35caa6fa4ee8c0e6a/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:07+00:00", "timestamp": "1772208007", "to_ids": false, "type": "url", "uuid": "1b3db832-770a-46d4-a884-c3a53abd5a7c", "value": "https://www.virustotal.com/gui/file/8e97c677aec905152f8a92fed50bb84ef2e8985d5c29330c5a05a4a2afcbd4a5/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:07+00:00", "timestamp": "1772208007", "to_ids": false, "type": "url", "uuid": "34301dc2-960f-4516-9b54-c4a36c64bd16", "value": "https://www.virustotal.com/gui/file/800faaf15d5f42f2ab2c1d2b6b65c8a9e4def6dc10f6ce4e269dcf23f4e8dae2/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:07+00:00", "timestamp": "1772208007", "to_ids": false, "type": "url", "uuid": "0b3037d9-ef32-46e0-b5da-439b1c652044", "value": "https://www.virustotal.com/gui/file/b1bd8f7d4488977cca03954a57f5c8ad7bfd4609bcc3bae92326830fcbd3232c/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:08+00:00", "timestamp": "1772208008", "to_ids": false, "type": "url", "uuid": "fd7b0a66-4c44-4dfd-b08d-1f4da7a2dda2", "value": "https://www.virustotal.com/gui/file/2ce3e75997f89b98dd280d164a5f21f7565f4de26eed61243badde04b480700e/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:08+00:00", "timestamp": "1772208008", "to_ids": true, "type": "domain", "uuid": "11f7dfc2-719d-43c3-a3be-9f9e55fa157c", "value": "deepinspectionsystem.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:08+00:00", "timestamp": "1772208008", "to_ids": true, "type": "domain", "uuid": "57d0db0f-847a-4d76-99bb-dcf9fadac1ba", "value": "mswinsoftupdload.design", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:08+00:00", "timestamp": "1772208008", "to_ids": true, "type": "domain", "uuid": "fd117114-7e00-4efb-8779-45d302a0cb7c", "value": "pnuisckmhwagzvdyjrlbeft.software", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:08+00:00", "timestamp": "1772208008", "to_ids": true, "type": "domain", "uuid": "e3beef21-0f7c-4663-ab2a-6e84335f8119", "value": "cjitdrpwnna.mswinsoftupdload.design", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:08+00:00", "timestamp": "1772208008", "to_ids": true, "type": "domain", "uuid": "4bf23f91-31e9-482c-ae79-4dab43e224ab", "value": "ezqrvkfgejwctdnc.pnuisckmhwagzvdyjrlbeft.software", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:09+00:00", "timestamp": "1772208009", "to_ids": true, "type": "domain", "uuid": "75b82fbd-2a9d-4db4-93d4-085b53a3cfcf", "value": "gitkzxd.pnuisckmhwagzvdyjrlbeft.software", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:09+00:00", "timestamp": "1772208009", "to_ids": true, "type": "domain", "uuid": "3bc84c03-6a75-408e-92e4-4a5a7dc26c1b", "value": "gppiwogwndiakkdu.pnuisckmhwagzvdyjrlbeft.software", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:09+00:00", "timestamp": "1772208009", "to_ids": true, "type": "domain", "uuid": "b658b21a-af68-47c1-b623-6541a8735008", "value": "lbandugzcfg.deepinspectionsystem.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:09+00:00", "timestamp": "1772208009", "to_ids": true, "type": "domain", "uuid": "dbff5992-1808-48d2-bee8-e2c16a63e2df", "value": "llalwpijnjskclwy.pnuisckmhwagzvdyjrlbeft.software", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:09+00:00", "timestamp": "1772208009", "to_ids": true, "type": "domain", "uuid": "529e496d-d5d7-4ec9-b81a-544148e96e2c", "value": "lsypdqgxredfpx.mswinsoftupdload.design", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:09+00:00", "timestamp": "1772208009", "to_ids": true, "type": "domain", "uuid": "cacff8a6-54dd-482c-89fc-40272aaaf891", "value": "qhtckzbxtkdvyr.mswinsoftupdload.design", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:10+00:00", "timestamp": "1772208010", "to_ids": true, "type": "domain", "uuid": "e040f89d-03ec-42c4-a52f-c1e9badf92b2", "value": "sdxsiol.pnuisckmhwagzvdyjrlbeft.software", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:10+00:00", "timestamp": "1772208010", "to_ids": true, "type": "domain", "uuid": "9bc85a8b-e0ab-40e5-80dd-eb3e79e2dd03", "value": "txjiqslrrig.mswinsoftupdload.design", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "dohdoor", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T16:00:10+00:00", "timestamp": "1772208010", "to_ids": true, "type": "domain", "uuid": "1948ed8a-7bb0-4eb6-add0-b37c0fd5cfce", "value": "yhdjtylnsmwvuu.deepinspectionsystem.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:02+00:00", "timestamp": "1772211602", "to_ids": false, "type": "url", "uuid": "e0feb6a9-3d04-47cf-b4c6-44702fc149a5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/bbd070f799f9ecb16b51b1a9ecdc9892849179b0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:02+00:00", "timestamp": "1772211602", "to_ids": true, "type": "domain", "uuid": "a38ccb18-a38e-4812-951a-496eaec3b66c", "value": "adscan.world", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:02+00:00", "timestamp": "1772211602", "to_ids": true, "type": "domain", "uuid": "84682355-82b1-4e34-aed6-8a0c553c0ae2", "value": "adverttracker.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:02+00:00", "timestamp": "1772211603", "to_ids": true, "type": "domain", "uuid": "0adfab1b-866c-4a4b-a969-03e9abfac8f9", "value": "aitoolnode.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:03+00:00", "timestamp": "1772211603", "to_ids": true, "type": "domain", "uuid": "a19dd352-b580-4ec4-9caa-ca5aa873f4e2", "value": "aml-scan.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:03+00:00", "timestamp": "1772211604", "to_ids": true, "type": "domain", "uuid": "a93e1517-b7fd-4394-8134-0d75760e22d3", "value": "calendly-house.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:04+00:00", "timestamp": "1772211605", "to_ids": true, "type": "domain", "uuid": "efc23f44-31db-4697-bf55-7755c1b8b5c0", "value": "clonewebstat.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:05+00:00", "timestamp": "1772211605", "to_ids": true, "type": "domain", "uuid": "6848f7c6-3fc9-48c9-864c-a0b80558a9ea", "value": "creativelibrary.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:05+00:00", "timestamp": "1772211606", "to_ids": true, "type": "domain", "uuid": "17cb04f3-cca7-4cae-ad2e-eca2727d93ad", "value": "crypto-whales.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:06+00:00", "timestamp": "1772211606", "to_ids": true, "type": "domain", "uuid": "541c708c-cef8-4625-8bec-55402ec10839", "value": "crypto-whales.world", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:06+00:00", "timestamp": "1772211606", "to_ids": true, "type": "domain", "uuid": "4029ca19-638f-4f13-a658-1ced97d2e453", "value": "deepseek-ai.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:06+00:00", "timestamp": "1772211606", "to_ids": true, "type": "domain", "uuid": "989bcd1b-fdd8-45d1-bb2c-c2581a5b9a4c", "value": "echoweb.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:06+00:00", "timestamp": "1772211606", "to_ids": true, "type": "domain", "uuid": "d9bb8eb9-033f-4856-94e8-67a263aaa231", "value": "exchange-wallet-plus.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:06+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "ec641bfd-bf2e-4c41-8adc-392db423f759", "value": "extension-studio.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:07+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "31e8c61f-607e-4aee-a226-51e570b70bb6", "value": "google-update.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:07+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "48814454-0cda-464c-bdf5-bb1e6692ae7f", "value": "iogroup.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:07+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "f27477e0-5fd7-4610-9aa2-f5966d5cf090", "value": "manusai.buzz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:07+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "d546b92f-70b8-49f5-8ba2-31ed46f46509", "value": "mirrorsphere.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:07+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "9f321f92-7b9a-4445-bbed-9cd7ce20b010", "value": "pigmentation.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:07+00:00", "timestamp": "1772211607", "to_ids": true, "type": "domain", "uuid": "7b02b96b-610c-4181-a464-d14c05d993dd", "value": "resonanceweb.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:08+00:00", "timestamp": "1772211608", "to_ids": true, "type": "domain", "uuid": "e029e5f4-57f7-46aa-8c42-740308fdd996", "value": "scam-alert.help", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:08+00:00", "timestamp": "1772211608", "to_ids": true, "type": "domain", "uuid": "3e257c75-2727-4be9-b045-8d32f455a3f0", "value": "site-scan.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:08+00:00", "timestamp": "1772211608", "to_ids": true, "type": "domain", "uuid": "926604b0-8e7c-4223-ad53-066ba90686af", "value": "smartio.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:08+00:00", "timestamp": "1772211608", "to_ids": true, "type": "domain", "uuid": "72f2ad76-9d6d-43f7-a61e-5c0b8b4c96d9", "value": "spotlightads.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T17:00:08+00:00", "timestamp": "1772211608", "to_ids": true, "type": "domain", "uuid": "2b30babb-dad7-4954-a9ad-33d0b3294f97", "value": "api.manusai.buzz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:03+00:00", "timestamp": "1772215204", "to_ids": false, "type": "url", "uuid": "b8d72d34-b5f6-4a4a-9959-323a4b067a50", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7002a78b524415a7780f50d2e9b95c62454a0d9c", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:04+00:00", "timestamp": "1772215205", "to_ids": true, "type": "domain", "uuid": "4bccaf6d-4408-4d4d-a40a-612d43b0d061", "value": "brainbeacone.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:05+00:00", "timestamp": "1772215205", "to_ids": true, "type": "domain", "uuid": "20902e55-fa96-419c-babc-46500e163243", "value": "brinoxateam.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:05+00:00", "timestamp": "1772215206", "to_ids": true, "type": "domain", "uuid": "d26b6319-bb32-4f39-a15a-dac7ba24c5fa", "value": "brupdate.digital", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:06+00:00", "timestamp": "1772215206", "to_ids": true, "type": "domain", "uuid": "245fb34d-a73f-44f9-a103-0aa459d8d139", "value": "bryvoradigital.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:06+00:00", "timestamp": "1772215206", "to_ids": true, "type": "domain", "uuid": "7b249c7a-1bf1-4b14-ac3e-85008992c182", "value": "clyzonalabs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:06+00:00", "timestamp": "1772215206", "to_ids": true, "type": "domain", "uuid": "5466c6d2-f74b-4d0c-92ce-bc7df79d66e8", "value": "coursecrestr.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:06+00:00", "timestamp": "1772215206", "to_ids": true, "type": "domain", "uuid": "9e2e9121-6c0f-449c-b13c-8725ef25de35", "value": "coursenebula.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:06+00:00", "timestamp": "1772215207", "to_ids": true, "type": "domain", "uuid": "ed37a489-b9de-43e3-beb3-6b8dec5b90b2", "value": "drenthivoweb.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:07+00:00", "timestamp": "1772215207", "to_ids": true, "type": "domain", "uuid": "f30c82e0-12ce-44ef-bd47-4cef8eba2fb0", "value": "edublick.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:07+00:00", "timestamp": "1772215207", "to_ids": true, "type": "domain", "uuid": "67f65ef9-61ed-429f-99e5-c4909503d2fa", "value": "eduempowere.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:07+00:00", "timestamp": "1772215207", "to_ids": true, "type": "domain", "uuid": "adbbf06f-5bd3-4b29-8b62-3d3a4d3669c3", "value": "edupaddle.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:07+00:00", "timestamp": "1772215207", "to_ids": true, "type": "domain", "uuid": "60a92276-77a1-40e7-b09d-040e9508c8f1", "value": "eduvividpath.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:07+00:00", "timestamp": "1772215207", "to_ids": true, "type": "domain", "uuid": "30ea98aa-2f7e-4be1-b19f-030787a8d55e", "value": "fralenthastudio.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:07+00:00", "timestamp": "1772215208", "to_ids": true, "type": "domain", "uuid": "f6edb5ac-d6fd-4d29-b8c3-1939096a82ed", "value": "insightignitee.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:08+00:00", "timestamp": "1772215208", "to_ids": true, "type": "domain", "uuid": "ceecb5e6-9056-416d-9320-d7c8e93616c7", "value": "jalyvoragroup.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:08+00:00", "timestamp": "1772215208", "to_ids": true, "type": "domain", "uuid": "ac1deec9-7deb-44d2-8485-58a4d2c4201a", "value": "knowledgekerneler.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:08+00:00", "timestamp": "1772215208", "to_ids": true, "type": "domain", "uuid": "d81d847a-5b6f-4527-b265-d9535130c564", "value": "knowledgerknolle.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:08+00:00", "timestamp": "1772215208", "to_ids": true, "type": "domain", "uuid": "3b10999b-5c55-439a-8f83-2f8b670408be", "value": "knowledgewink.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:08+00:00", "timestamp": "1772215208", "to_ids": true, "type": "domain", "uuid": "7d1be6b2-8e75-483f-8874-8b83912df712", "value": "kyoumapanel.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:08+00:00", "timestamp": "1772215209", "to_ids": true, "type": "domain", "uuid": "807fd473-494c-4369-ba6e-527f8262324c", "value": "learnliftes.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:09+00:00", "timestamp": "1772215209", "to_ids": true, "type": "domain", "uuid": "a8adbf73-d25e-4ee8-97b1-16e870c6e269", "value": "lurynthadesign.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:09+00:00", "timestamp": "1772215209", "to_ids": true, "type": "domain", "uuid": "2e996f70-f665-4861-87f6-e2ad0e9502c1", "value": "minddmastery.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:09+00:00", "timestamp": "1772215209", "to_ids": true, "type": "domain", "uuid": "2802910c-8672-4cf7-9503-4165a0181c88", "value": "mindflourishroute.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:09+00:00", "timestamp": "1772215209", "to_ids": true, "type": "domain", "uuid": "0ca93f4b-8680-4b16-924f-117edea6d824", "value": "omieinstpagamentos.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:09+00:00", "timestamp": "1772215209", "to_ids": true, "type": "domain", "uuid": "30168288-0fdf-4c18-826b-6edd60bf28cd", "value": "schreineramaral.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:09+00:00", "timestamp": "1772215210", "to_ids": true, "type": "domain", "uuid": "deb07490-e522-4928-b950-ce3c55a917c0", "value": "skillquestertrail.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:10+00:00", "timestamp": "1772215210", "to_ids": true, "type": "domain", "uuid": "f1051e65-73a9-449e-a26a-a1de492ffe3c", "value": "skillsoarc.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:10+00:00", "timestamp": "1772215210", "to_ids": true, "type": "domain", "uuid": "50c8d573-945d-4771-806d-4675593c7ce7", "value": "studysagee.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:10+00:00", "timestamp": "1772215210", "to_ids": true, "type": "domain", "uuid": "f2673219-4e64-4c53-b117-3347d912b7ac", "value": "trexvorasolutions.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:10+00:00", "timestamp": "1772215210", "to_ids": true, "type": "domain", "uuid": "75fb5121-59bd-476b-bb19-b028400abd5f", "value": "wisdomriselearn.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:10+00:00", "timestamp": "1772215210", "to_ids": true, "type": "domain", "uuid": "1e8b811b-e16b-4b87-838b-7e83fab94a6b", "value": "xarnexamedia.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:10+00:00", "timestamp": "1772215211", "to_ids": true, "type": "domain", "uuid": "c27d06e7-a895-40cc-af3d-a5cf41650d5c", "value": "zenthivalabs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:11+00:00", "timestamp": "1772215211", "to_ids": true, "type": "domain", "uuid": "88b5eae2-6398-4f8e-99ac-148aef7aae66", "value": "zytherostudio.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:11+00:00", "timestamp": "1772215211", "to_ids": false, "type": "url", "uuid": "5bf246c3-2606-491f-94da-76122dbf073b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/bbd927b1bbb5faf7fd49d6d1ae0109ad953ae9ce", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:11+00:00", "timestamp": "1772215211", "to_ids": true, "type": "domain", "uuid": "71465bbc-2dfd-42c6-91c4-0afebf19c61c", "value": "ihave.farm", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:11+00:00", "timestamp": "1772215211", "to_ids": false, "type": "url", "uuid": "3b652af6-9084-459b-bf28-0f519b809539", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cf8e2e95d148178d086d1fd21c9459f99738dbd4", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:11+00:00", "timestamp": "1772215212", "to_ids": true, "type": "domain", "uuid": "ab4fe927-3bf6-4265-beef-bd19e20d6ef5", "value": "datavision.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:12+00:00", "timestamp": "1772215212", "to_ids": false, "type": "url", "uuid": "c1fbb0d5-e11d-49c3-bfb5-09c59e155a50", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e4845982e3ff4795b2a443250f758efaf82218d1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:12+00:00", "timestamp": "1772215212", "to_ids": true, "type": "domain", "uuid": "32fb43e4-364e-4ba3-af23-2289261025eb", "value": "cpanel.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:12+00:00", "timestamp": "1772215212", "to_ids": true, "type": "domain", "uuid": "bbc403cb-d549-4bca-91c0-ca9b121327be", "value": "cpcontacts.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:12+00:00", "timestamp": "1772215212", "to_ids": true, "type": "domain", "uuid": "ff74ea21-064c-44ef-93c0-34edb4aeb1d5", "value": "en.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:12+00:00", "timestamp": "1772215212", "to_ids": true, "type": "domain", "uuid": "46883e84-f830-4fc1-a193-d72d91cbd84e", "value": "ns.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:13+00:00", "timestamp": "1772215213", "to_ids": true, "type": "domain", "uuid": "ec4f4f3c-1272-483a-8915-896344a34837", "value": "root.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:13+00:00", "timestamp": "1772215213", "to_ids": true, "type": "domain", "uuid": "30244b52-a490-4b09-8b1c-bc7ce3c9625f", "value": "sitemap.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:13+00:00", "timestamp": "1772215213", "to_ids": true, "type": "domain", "uuid": "7a04a597-35d1-4bcf-b182-81b3989642b2", "value": "sub.brupdate.digital", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:13+00:00", "timestamp": "1772215213", "to_ids": true, "type": "domain", "uuid": "b434b6e8-5ea3-4ca2-bebe-889904d905e1", "value": "wap.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:13+00:00", "timestamp": "1772215213", "to_ids": true, "type": "domain", "uuid": "47a1f5e9-a18d-43a7-ad0d-8c5ae09f26f0", "value": "ww1.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:13+00:00", "timestamp": "1772215213", "to_ids": false, "type": "url", "uuid": "859d1bf0-ec3c-44b6-928a-feed843a9dbf", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0f80be0c3f7d1577a636bc8982de6795a7e732de", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:14+00:00", "timestamp": "1772215214", "to_ids": true, "type": "domain", "uuid": "34db6db3-976c-4ece-afb5-1bb03021dac9", "value": "372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:14+00:00", "timestamp": "1772215214", "to_ids": true, "type": "domain", "uuid": "96dd89a8-2848-4a96-a49b-6e1f2f30a6fb", "value": "ggl.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T18:00:14+00:00", "timestamp": "1772215214", "to_ids": true, "type": "domain", "uuid": "5678ed49-9454-4b10-888b-0ae7c293e432", "value": "new.372893892382932v4k4s1m0n3.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:02+00:00", "timestamp": "1772222402", "to_ids": false, "type": "url", "uuid": "d65bbabf-936e-4a85-af7f-02506a191440", "value": "https://api.github.com/repos/stamparm/maltrail/commits/76bc272bf33eacca7aafad8ab9cd5f91e2f62223", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:02+00:00", "timestamp": "1772222402", "to_ids": false, "type": "url", "uuid": "2f1de998-9cd4-46b4-a6c3-c43f1cf4ed03", "value": "https://socket.dev/blog/malicious-go-crypto-module-steals-passwords-and-deploys-rekoobe-backdoor", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:02+00:00", "timestamp": "1772222403", "to_ids": false, "type": "url", "uuid": "b4a6dc37-f44c-4f1f-84da-94b46ea54342", "value": "https://www.virustotal.com/gui/file/1e8278d07af09b9b191967e2e16cd66e8aca316235f341774247055df0f214da/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:03+00:00", "timestamp": "1772222403", "to_ids": false, "type": "url", "uuid": "bfc2efc6-d924-43dc-b051-2255bb90f759", "value": "https://www.virustotal.com/gui/file/8b0ec8d0318347874e117f1aed1b619892a7547308e437a20e02090e5f3d2da6/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:03+00:00", "timestamp": "1772222405", "to_ids": true, "type": "ip-dst", "uuid": "41b805d0-4b72-442e-a629-61c98247932c", "value": "154.84.63.184", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:05+00:00", "timestamp": "1772222405", "to_ids": true, "type": "domain", "uuid": "08fe9474-b9a1-4acf-8694-3fb4e27f7705", "value": "spoolsv.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:05+00:00", "timestamp": "1772222406", "to_ids": true, "type": "domain", "uuid": "1a9a1003-0351-4b9f-aea7-9d3c1d7a07a2", "value": "spoolsv.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:06+00:00", "timestamp": "1772222406", "to_ids": true, "type": "domain", "uuid": "70f7e11e-f42e-4cc0-ac51-b56a2ab8f305", "value": "cdn.spoolsv.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:06+00:00", "timestamp": "1772222406", "to_ids": true, "type": "domain", "uuid": "67b56dcb-2e63-4342-b49d-e21dba3192e1", "value": "img.spoolsv.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:06+00:00", "timestamp": "1772222406", "to_ids": true, "type": "domain", "uuid": "e57ccdf8-a827-4061-a7a2-4ae4b9a39902", "value": "img.spoolsv.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:06+00:00", "timestamp": "1772222407", "to_ids": true, "type": "domain", "uuid": "428c82be-e104-4816-8629-ff68407f0a2e", "value": "m.spoolsv.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_rekoobe", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T20:00:07+00:00", "timestamp": "1772222407", "to_ids": true, "type": "domain", "uuid": "cf9a36e1-1f62-441e-acfa-8a030c87f8dd", "value": "update.spoolsv.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T21:00:02+00:00", "timestamp": "1772226002", "to_ids": false, "type": "url", "uuid": "a48c42b5-14eb-4fd2-9c83-79b30aa3a9a5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c647681271091c418c41b7f8e5db3b820ea7daa5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T21:00:02+00:00", "timestamp": "1772226002", "to_ids": true, "type": "domain", "uuid": "7789ab4f-6f6f-48cc-94aa-35c3616294b0", "value": "nid-naverdqp.servequake.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ipinfo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:02+00:00", "timestamp": "1772229603", "to_ids": false, "type": "url", "uuid": "c417a60b-fee7-413b-af1e-c47dbebf9041", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7a60db50c8f77c4559177297397210618a16355b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ipinfo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:03+00:00", "timestamp": "1772229604", "to_ids": false, "type": "url", "uuid": "edfcc75a-95ce-428a-87a7-5f052991c383", "value": "https://www.virustotal.com/gui/ip-address/95.85.252.196/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ipinfo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:04+00:00", "timestamp": "1772229605", "to_ids": false, "type": "url", "uuid": "f88d28a2-4f3f-44f9-a14c-09bcdaf8ba9e", "value": "https://app.any.run/tasks/ea77b391-69ef-4c61-9a32-2a9d3ca2af08", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ipinfo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:05+00:00", "timestamp": "1772229606", "to_ids": true, "type": "domain", "uuid": "8f284ff3-4ab4-4d44-a099-7d8fd79964ee", "value": "ip.wtf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ipinfo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:06+00:00", "timestamp": "1772229606", "to_ids": true, "type": "domain", "uuid": "3db16eb8-a703-4a67-a603-916f04937947", "value": "v4.ip.wtf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ipinfo", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:06+00:00", "timestamp": "1772229606", "to_ids": true, "type": "domain", "uuid": "8aa3c870-c55d-4721-ba7e-e8c01b3cb969", "value": "v6.ip.wtf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:06+00:00", "timestamp": "1772229606", "to_ids": false, "type": "url", "uuid": "5f229a37-bfc0-475a-91d4-93b2fab89cb2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7d309bd1de2511d523e76cea01bd2dbb557f4a55", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unclassified", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T22:00:07+00:00", "timestamp": "1772229607", "to_ids": true, "type": "domain", "uuid": "6696f16c-1b6b-416d-89f1-761ee3046989", "value": "ua-gov.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:03+00:00", "timestamp": "1772233204", "to_ids": false, "type": "url", "uuid": "da5997e6-1d5a-41eb-b15e-995c05bc5243", "value": "https://api.github.com/repos/stamparm/maltrail/commits/32eebc57f9ea40c9cf1de0bde90ced7842bce33d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:04+00:00", "timestamp": "1772233205", "to_ids": true, "type": "domain", "uuid": "10361fda-3430-460f-8241-d6ecf45be68d", "value": "88pak1.pixelrealm.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:05+00:00", "timestamp": "1772233205", "to_ids": true, "type": "domain", "uuid": "b8aee499-3b06-43e8-a75f-f31e455b8f99", "value": "api.pixelrealm.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:05+00:00", "timestamp": "1772233205", "to_ids": true, "type": "domain", "uuid": "17febdb9-ca03-49ed-ab06-e2cc65ae09de", "value": "app.pixelrealm.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:05+00:00", "timestamp": "1772233206", "to_ids": true, "type": "domain", "uuid": "53bf9280-6550-425d-a0cf-43d743d6f2ca", "value": "rustore.pixelrealm.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:06+00:00", "timestamp": "1772233206", "to_ids": false, "type": "url", "uuid": "1efd35fd-b0a6-4714-a8e2-a1d021c53831", "value": "https://api.github.com/repos/stamparm/maltrail/commits/e651e9e7d5d442e4869a6510c07144fe2e1f6930", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:06+00:00", "timestamp": "1772233206", "to_ids": true, "type": "domain", "uuid": "58e803ce-9505-49c5-ad4e-d9e9c4afd82d", "value": "pixelrealm.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_chromecrxext", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:06+00:00", "timestamp": "1772233206", "to_ids": true, "type": "domain", "uuid": "91276925-91e2-4a2a-b729-620849fcbc49", "value": "web3-badges.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:06+00:00", "timestamp": "1772233207", "to_ids": false, "type": "url", "uuid": "dcf2f877-bed8-452b-a428-829bc987de1e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/be7e4423fe08ad62e385b274188c83a2659a28f9", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:07+00:00", "timestamp": "1772233207", "to_ids": false, "type": "url", "uuid": "9eec01f0-6fe7-450c-9106-7d9882d4c728", "value": "https://github.com/ChainK1ll/Daily_Intel/blob/main/MacSync", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:07+00:00", "timestamp": "1772233207", "to_ids": true, "type": "domain", "uuid": "cd495b4e-6990-4a24-bc05-49602710ec6a", "value": "a2aagentive.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:07+00:00", "timestamp": "1772233207", "to_ids": true, "type": "domain", "uuid": "37670d10-31d0-43cb-9e04-d34dbdf72160", "value": "alfredoway.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:07+00:00", "timestamp": "1772233207", "to_ids": true, "type": "domain", "uuid": "d0ea32db-7ef9-4060-9226-7da8119f2da3", "value": "argoflyleens.fun", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:07+00:00", "timestamp": "1772233207", "to_ids": true, "type": "domain", "uuid": "de86356d-64fc-478c-9e7f-734f1c9fa372", "value": "argoflyleens.today", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:07+00:00", "timestamp": "1772233208", "to_ids": true, "type": "domain", "uuid": "dc3316ad-af71-4250-97af-d64b34c44e8e", "value": "ballfrank.coupons", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:08+00:00", "timestamp": "1772233208", "to_ids": true, "type": "domain", "uuid": "baedc6aa-3f5f-4ca5-b9e3-f7f16561fe51", "value": "brokebin.fun", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:08+00:00", "timestamp": "1772233208", "to_ids": true, "type": "domain", "uuid": "10053363-5c1b-4266-9fc3-49f6e1b9700b", "value": "californiatireshop.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:08+00:00", "timestamp": "1772233208", "to_ids": true, "type": "domain", "uuid": "7b8a67d4-bedf-45f2-ba48-dc11d1073f62", "value": "clearwaterfishingcompany.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:08+00:00", "timestamp": "1772233208", "to_ids": true, "type": "domain", "uuid": "55e317c7-ea6f-4aff-a14a-229e50b91d1f", "value": "cocinadecor.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:08+00:00", "timestamp": "1772233208", "to_ids": true, "type": "domain", "uuid": "4ed85540-b874-40ff-98c5-2114702dd310", "value": "contatoplus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:08+00:00", "timestamp": "1772233209", "to_ids": true, "type": "domain", "uuid": "05516702-66bb-4dfb-9fc3-f94215f4214f", "value": "customwrapsnearme.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:09+00:00", "timestamp": "1772233209", "to_ids": true, "type": "domain", "uuid": "c25bc6be-67bc-4455-bf99-17cf0f0ab837", "value": "elfrodbloom.city", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:09+00:00", "timestamp": "1772233209", "to_ids": true, "type": "domain", "uuid": "db08a9e9-4aea-4e9e-932d-91a79f7320df", "value": "elfrodbloom.today", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:09+00:00", "timestamp": "1772233209", "to_ids": true, "type": "domain", "uuid": "d4c87747-cc83-4cd2-8d26-b51446e9f7a2", "value": "foldexmoon.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:09+00:00", "timestamp": "1772233209", "to_ids": true, "type": "domain", "uuid": "f6486f9e-e752-43ef-b10c-99cb4ea9a452", "value": "germansnipers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:09+00:00", "timestamp": "1772233209", "to_ids": true, "type": "domain", "uuid": "5294e3fc-c8d5-46ba-a126-1b444e46a8fa", "value": "gosemobi.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:09+00:00", "timestamp": "1772233210", "to_ids": true, "type": "domain", "uuid": "fd2839e7-7b8a-4f28-bce9-38296a2900d7", "value": "grapeballs.fun", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:10+00:00", "timestamp": "1772233210", "to_ids": true, "type": "domain", "uuid": "ce68416c-1fed-42f7-9bdb-7825115753e0", "value": "greatwallk.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:10+00:00", "timestamp": "1772233210", "to_ids": true, "type": "domain", "uuid": "b279907c-d281-4502-8bfb-f1e0f55c76e2", "value": "groovyfox.coupons", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:10+00:00", "timestamp": "1772233210", "to_ids": true, "type": "domain", "uuid": "57029c61-d3a5-4fda-bb05-b9960217c509", "value": "houstongaragedoorinstallers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:10+00:00", "timestamp": "1772233210", "to_ids": true, "type": "domain", "uuid": "1e204c64-0bb3-4c71-a687-8fe85c5429ba", "value": "invesrting.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:10+00:00", "timestamp": "1772233210", "to_ids": true, "type": "domain", "uuid": "e442a397-d3ae-4cbd-875c-f9a87309065c", "value": "iphotline.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:11+00:00", "timestamp": "1772233211", "to_ids": true, "type": "domain", "uuid": "9835bc37-c94c-4d8b-8e9e-ec37d7dbb6ff", "value": "joeyapple.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:11+00:00", "timestamp": "1772233211", "to_ids": true, "type": "domain", "uuid": "c764b5cf-592b-43e0-92f6-c69cd037ea09", "value": "kuturu.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:11+00:00", "timestamp": "1772233211", "to_ids": true, "type": "domain", "uuid": "d1dcfe50-7ca9-4f81-b4d7-f0a6a778be3c", "value": "loudounmovingcompany.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:11+00:00", "timestamp": "1772233211", "to_ids": true, "type": "domain", "uuid": "68662652-43d3-4542-8206-68ff2e2b0766", "value": "mndivorcemediator.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:11+00:00", "timestamp": "1772233211", "to_ids": true, "type": "domain", "uuid": "5dd9e4b7-6462-4f1f-99d3-4c2f39acd0b4", "value": "mondozer.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:11+00:00", "timestamp": "1772233212", "to_ids": true, "type": "domain", "uuid": "6557e8de-bb82-43f1-a95c-fae3880885c7", "value": "octopox.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:12+00:00", "timestamp": "1772233212", "to_ids": true, "type": "domain", "uuid": "04346f4c-dd55-433b-9330-4e5f16282720", "value": "oncetimers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:12+00:00", "timestamp": "1772233212", "to_ids": true, "type": "domain", "uuid": "1748c6da-caf2-4c3b-abad-4ebc35b2ec58", "value": "phoenixfilmproductions.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:12+00:00", "timestamp": "1772233212", "to_ids": true, "type": "domain", "uuid": "d2c34b5f-6799-4f07-95f3-8d474ded31f6", "value": "share2e2git.autos", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:12+00:00", "timestamp": "1772233212", "to_ids": true, "type": "domain", "uuid": "ef890a05-4919-4dfc-9cf7-cb58c41ed7f0", "value": "shurktomb.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:12+00:00", "timestamp": "1772233212", "to_ids": true, "type": "domain", "uuid": "7bc58788-6bc6-49c0-a9f0-c36f1ae06a29", "value": "sphereou.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:12+00:00", "timestamp": "1772233213", "to_ids": true, "type": "domain", "uuid": "c1c6116d-dfd8-4dbd-aacd-c4afce4a3a50", "value": "storageflipper.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:13+00:00", "timestamp": "1772233213", "to_ids": true, "type": "domain", "uuid": "2b39d380-761b-4185-858b-77e23b9c487e", "value": "technicalchief.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:13+00:00", "timestamp": "1772233213", "to_ids": true, "type": "domain", "uuid": "16d76170-673e-42ea-bf7f-0f3e8563dcae", "value": "underword.fun", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:13+00:00", "timestamp": "1772233213", "to_ids": true, "type": "domain", "uuid": "250d1b8c-c919-4f85-8775-788cff57ffe0", "value": "usedteslabuyers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:13+00:00", "timestamp": "1772233213", "to_ids": true, "type": "domain", "uuid": "1e89a867-5a95-4ff9-ae81-8f4d13e37d73", "value": "vcopp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:13+00:00", "timestamp": "1772233213", "to_ids": false, "type": "url", "uuid": "ee02780d-03e6-44ec-aca3-7c716675044a", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b854324da5b59b06c8c07af9fb2e2be7678d9401", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_lazarus", "deleted": false, "disable_correlation": false, "last_seen": "2026-02-27T23:00:13+00:00", "timestamp": "1772233214", "to_ids": true, "type": "domain", "uuid": "81076015-6e27-4618-aaa4-aec4a34a9e9b", "value": "me-c0h.pages.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }