{
  "Event": {
    "analysis": "1",
    "date": "2026-07-24",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-07-25",
    "publish_timestamp": "1784948402",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1784934006",
    "uuid": "fde8c224-d432-4ef4-bd2a-e6a7cbce079d",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:03+00:00",
        "timestamp": "1784934004",
        "to_ids": false,
        "type": "url",
        "uuid": "8273ce21-d75c-44d9-ab91-613aff981ee6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/15012c9a3de59634ce4a7ec3e6b85c7eba5db5af",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:04+00:00",
        "timestamp": "1784934004",
        "to_ids": false,
        "type": "url",
        "uuid": "73ad8e8f-db17-4b93-be85-b1dbff5e87d4",
        "value": "https://www.virustotal.com/gui/file/0a46a6c837d5db4ec12a1d067f9a087abddd23e5c180c2a239eac76fbbc300ce/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:04+00:00",
        "timestamp": "1784934004",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "29902697-280d-4cef-802d-99850c089f9b",
        "value": "46.165.244.150",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "littlerat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:04+00:00",
        "timestamp": "1784934004",
        "to_ids": false,
        "type": "url",
        "uuid": "b98e1a0d-7b74-412b-b30f-30673b6dec83",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4d307b14b467b39e215636c4e2bfed544ee80b8b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "littlerat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:04+00:00",
        "timestamp": "1784934004",
        "to_ids": false,
        "type": "url",
        "uuid": "d6de0a52-11cc-4da8-9dc2-e7376421365b",
        "value": "https://www.virustotal.com/gui/file/0188a723f26174fb0a9266704410578a1f095834fb16e6c412837b56c1436a56/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "littlerat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:04+00:00",
        "timestamp": "1784934005",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc2d03cb-0e66-4638-bc0e-74534981ddb1",
        "value": "nukebooter.no-ip.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:05+00:00",
        "timestamp": "1784934005",
        "to_ids": false,
        "type": "url",
        "uuid": "66bf45da-6d17-407e-bed5-0b321763e981",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d27a24e72cbb4103048aa78c29fce81acf8ed6c2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:05+00:00",
        "timestamp": "1784934005",
        "to_ids": false,
        "type": "url",
        "uuid": "3e29585a-cf79-4d24-ac25-4363893211a7",
        "value": "https://x.com/malwrhunterteam/status/2080626563977011542",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:05+00:00",
        "timestamp": "1784934005",
        "to_ids": false,
        "type": "url",
        "uuid": "1831fd4a-28a2-4e22-97d5-a3473e537251",
        "value": "https://www.virustotal.com/gui/file/3a5dc19f8c518a46f92d6d475e96c87fb1130352eae36530e0e721515deb7ba6/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:05+00:00",
        "timestamp": "1784934005",
        "to_ids": false,
        "type": "url",
        "uuid": "b9170852-0d0b-411a-a25d-c67b6c4dc88d",
        "value": "https://www.virustotal.com/gui/file/73df809d1e115d580f56a7b788f9edc528c031c4ccb2e276fead8051d09ec8d8/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:05+00:00",
        "timestamp": "1784934006",
        "to_ids": true,
        "type": "domain",
        "uuid": "fca80080-c55b-4371-b79e-dae941ad72df",
        "value": "vapeauroz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-24T23:00:06+00:00",
        "timestamp": "1784934006",
        "to_ids": true,
        "type": "domain",
        "uuid": "2eb09577-8a70-4a04-b96b-7a83d232bf95",
        "value": "mail.vapeauroz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}