[
  {
    "id": 2861989256,
    "indicator": "18c9430104b98acad9376d348723cbcb",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Doc.Macro.MaliciousHeuristic-6298845-0",
    "description": "MD5 of 818f304883e566aa5cce96bda31d28239ade1164518f38377d6f4d80d449bae6",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2876041812,
    "indicator": "1dadb4c3fe45566d28b7156be2e2aa6b",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "MD5 of 0289ee3c551ba84d34ab1760d042ab420733d96dbfedfae9718f8eb138c3259b\nMD5 of 0289ee3c551ba84d34ab1760d042ab420733d96dbfedfae9718f8eb138c3259b",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2849661455,
    "indicator": "2539c8639e836b7809c07c62f2a625ed",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "SNH:Script\\ [Dropper]",
    "description": "MD5 of cac79774c96452f034a2e3d65334f9123413932b5627d2b639ffa7b4efbf81a7",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279165,
    "indicator": "31a2a45d38f065088faa635068184264",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "MD5 of 7d5757013dd5f4888b13a1eaf6b615da51b6cb9dc7568c7661857ab2a4cfc1a9",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3229854124,
    "indicator": "5fc50cecdc7da2761f4ccce4b2c1362f",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Win32:PWSX-gen\\ [Trj]",
    "description": "MD5 of 107c8bfec5d8a4e23c429692da4204025bb77fe71ff6b56a6804f5f19dc820c1",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3243718377,
    "indicator": "61094b085b3f17077e2b1c9eef90f435",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "MD5 of 36966f3ff9a3540873407980a43f50afb6b826c3e3046e18992dfe7afb6191ff",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279166,
    "indicator": "6112c02f7c568ce5a1b04de1ff2623ac",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Other:Malware-gen\\ [Trj]",
    "description": "MD5 of bd630c3f79afd61a57b259f8f69593ead8f7e7bd3a6835bd9d3c4032f30dfb01",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2861988509,
    "indicator": "81eee0019d969e69d3a3f61a4c8046f0",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Doc.Macro.MaliciousHeuristic-6298845-0",
    "description": "MD5 of a4e0bf4310658fe98bebd2e94fee706fe52079b3f02d52700a40317d3225b09d",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279167,
    "indicator": "846278e501c9523872b1e89aec9a1fdf",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "MD5 of de2cb3d281de8e1c4cd29bac18a633749da5d32013e67104579f3a9ee2bea239",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3252359056,
    "indicator": "94b1f32c179d10f8467664bc17a4eaa6",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "MD5 of 45b8ec3b9809beaf5c877d12924fa6f2983e37d3b3a4e5ad31c2e469ec5dd6f7",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279168,
    "indicator": "c304714a4f5489ee9e065650f95de20c",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "MD5 of 60a1a9a1e00a7e497cc935e4554ead3eda6ae88914e031c760f92db77c2c8ed0",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2874237340,
    "indicator": "c38f6361cc10ddee53304cbf6482c0be",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "MD5 of 3f978ea5bfab5842d6d9c96ea4ab7b034818accfa9fe90f646e1fde7b23b087e\nMD5 of 3f978ea5bfab5842d6d9c96ea4ab7b034818accfa9fe90f646e1fde7b23b087e",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3251810887,
    "indicator": "ef10abba744bec8ddc37cef69365d061",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "MD5 of ba9fe1f154b98085f694fc4eee4fe19b0337d304b1cb47633b566beced96df93",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279169,
    "indicator": "ef9b989d21dacf108299a5acaf5ffdf8",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "MD5 of f2dbd1f8aee814c623e74b862d1f7be363a93ef6c33ef579cfe7b9b38f274f11",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3229970829,
    "indicator": "f93324854461139c58e0e865ceb3c859",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Win32:RATX-gen\\ [Trj]",
    "description": "MD5 of aaac6d698326e6fbbcd64057fbf591ef97bf143494ede008d41ab75e5a37db5a",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279170,
    "indicator": "05c0035ed7a8fd1656489d2f29ed3d13e8c793fc",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "SHA1 of de2cb3d281de8e1c4cd29bac18a633749da5d32013e67104579f3a9ee2bea239",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279171,
    "indicator": "0aba1d25e354451cbad0fc656418e5e9a83ce979",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "SHA1 of 60a1a9a1e00a7e497cc935e4554ead3eda6ae88914e031c760f92db77c2c8ed0",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3229970830,
    "indicator": "3deeda7cea856d0d45ee83aeb23e000101623c32",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Win32:RATX-gen\\ [Trj]",
    "description": "SHA1 of aaac6d698326e6fbbcd64057fbf591ef97bf143494ede008d41ab75e5a37db5a",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2861405380,
    "indicator": "4d079853d17f2feb871ab22914692b7bc5f0f9bd",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Doc.Macro.MaliciousHeuristic-6298845-0",
    "description": "SHA1 of a4e0bf4310658fe98bebd2e94fee706fe52079b3f02d52700a40317d3225b09d",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3229854125,
    "indicator": "536420b712568d288112f7f38c4e79792be0c107",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Win32:PWSX-gen\\ [Trj]",
    "description": "SHA1 of 107c8bfec5d8a4e23c429692da4204025bb77fe71ff6b56a6804f5f19dc820c1",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279172,
    "indicator": "53fecb422d1b1663e4a9aec9f5a3a020e818a6f9",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "SHA1 of 0289ee3c551ba84d34ab1760d042ab420733d96dbfedfae9718f8eb138c3259b\nSHA1 of 0289ee3c551ba84d34ab1760d042ab420733d96dbfedfae9718f8eb138c3259b",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279173,
    "indicator": "60a9d3e1c911e3629c1eea2aded6ecd11114708e",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Doc.Macro.MaliciousHeuristic-6298845-0",
    "description": "SHA1 of 818f304883e566aa5cce96bda31d28239ade1164518f38377d6f4d80d449bae6",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3251810888,
    "indicator": "6e46309b7c378acf55cdc01746be42ed403661a6",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "SHA1 of ba9fe1f154b98085f694fc4eee4fe19b0337d304b1cb47633b566beced96df93",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279174,
    "indicator": "7c727b4b5978d70b9d8d201d867a8951fa207025",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "SNH:Script\\ [Dropper]",
    "description": "SHA1 of cac79774c96452f034a2e3d65334f9123413932b5627d2b639ffa7b4efbf81a7",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3252359057,
    "indicator": "8a8ea3b86bc8f19bb2638f00669cae30745031ac",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "SHA1 of 45b8ec3b9809beaf5c877d12924fa6f2983e37d3b3a4e5ad31c2e469ec5dd6f7",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279175,
    "indicator": "961d396c2f8835f3c4dd40c7ba47ada09837fa8f",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Other:Malware-gen\\ [Trj]",
    "description": "SHA1 of bd630c3f79afd61a57b259f8f69593ead8f7e7bd3a6835bd9d3c4032f30dfb01",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3243718378,
    "indicator": "ded16ebf5e224ab5a875d5589ace5a20c81db0cc",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "SHA1 of 36966f3ff9a3540873407980a43f50afb6b826c3e3046e18992dfe7afb6191ff",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279176,
    "indicator": "ebcc3905896370ce81318ad7ad3c5aef246e5fae",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "SHA1 of f2dbd1f8aee814c623e74b862d1f7be363a93ef6c33ef579cfe7b9b38f274f11",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279177,
    "indicator": "f0bcda2ae40f8e6e82557699a24edfe1b2ef3041",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "SHA1 of 7d5757013dd5f4888b13a1eaf6b615da51b6cb9dc7568c7661857ab2a4cfc1a9",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279178,
    "indicator": "fd6719966a84c51b55c830bb6c138e81e227fc93",
    "type": "FileHash-SHA1",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "SHA1 of 3f978ea5bfab5842d6d9c96ea4ab7b034818accfa9fe90f646e1fde7b23b087e\nSHA1 of 3f978ea5bfab5842d6d9c96ea4ab7b034818accfa9fe90f646e1fde7b23b087e",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279179,
    "indicator": "0289ee3c551ba84d34ab1760d042ab420733d96dbfedfae9718f8eb138c3259b",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279180,
    "indicator": "07ddd3412909da33d751bcf1e3ec22b82464f1dc8b11af6bc7206b5bfe19e477",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279181,
    "indicator": "0f8d952d31e5bbbea50ef45c50f9ad0c1047fe51eb5e4340025602a7f5fc5962",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3237970563,
    "indicator": "10314b0e419df11447489f46ed23232b128c91e12119a5cb1dfb8a395d6ae402",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3229854126,
    "indicator": "107c8bfec5d8a4e23c429692da4204025bb77fe71ff6b56a6804f5f19dc820c1",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Win32:PWSX-gen\\ [Trj]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3243718379,
    "indicator": "36966f3ff9a3540873407980a43f50afb6b826c3e3046e18992dfe7afb6191ff",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2915157162,
    "indicator": "3f978ea5bfab5842d6d9c96ea4ab7b034818accfa9fe90f646e1fde7b23b087e",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3252359058,
    "indicator": "45b8ec3b9809beaf5c877d12924fa6f2983e37d3b3a4e5ad31c2e469ec5dd6f7",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279182,
    "indicator": "60a1a9a1e00a7e497cc935e4554ead3eda6ae88914e031c760f92db77c2c8ed0",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3232264751,
    "indicator": "7d5757013dd5f4888b13a1eaf6b615da51b6cb9dc7568c7661857ab2a4cfc1a9",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279183,
    "indicator": "818f304883e566aa5cce96bda31d28239ade1164518f38377d6f4d80d449bae6",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Doc.Macro.MaliciousHeuristic-6298845-0",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2861405379,
    "indicator": "a4e0bf4310658fe98bebd2e94fee706fe52079b3f02d52700a40317d3225b09d",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Doc.Macro.MaliciousHeuristic-6298845-0",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3229970831,
    "indicator": "aaac6d698326e6fbbcd64057fbf591ef97bf143494ede008d41ab75e5a37db5a",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Win32:RATX-gen\\ [Trj]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3251810889,
    "indicator": "ba9fe1f154b98085f694fc4eee4fe19b0337d304b1cb47633b566beced96df93",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279184,
    "indicator": "bd630c3f79afd61a57b259f8f69593ead8f7e7bd3a6835bd9d3c4032f30dfb01",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "Other:Malware-gen\\ [Trj]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279185,
    "indicator": "c4723910526b6c8994e505eee03ffc51b4337a9c870b278041f8cdaee47e97bf",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279186,
    "indicator": "cac79774c96452f034a2e3d65334f9123413932b5627d2b639ffa7b4efbf81a7",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "SNH:Script\\ [Dropper]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279187,
    "indicator": "de2cb3d281de8e1c4cd29bac18a633749da5d32013e67104579f3a9ee2bea239",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "MO97:Downloader-VH\\ [Trj]",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3232264746,
    "indicator": "f2dbd1f8aee814c623e74b862d1f7be363a93ef6c33ef579cfe7b9b38f274f11",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "PWS:MSIL/DarkStealer!MTB",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3298915737,
    "indicator": "http://103.125.190.248/j/p1a/login.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345837,
    "indicator": "http://103.125.190.248/j/p1a/mawa/3a3a0c4b972bfe8a04fe.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345838,
    "indicator": "http://103.125.190.248/j/p1a/mawa/67a10f84d937d92cc069.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345839,
    "indicator": "http://103.125.190.248/j/p1a/mawa/d68fbb027e9c4963e967.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "ASCII text, with no line terminators",
    "description": "f510f3500a13fba4b8ffa86e801144d3bc72249aab2f830fc3fd8d187044c9eb",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279188,
    "indicator": "http://103.141.138.110/k/6f/login.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279189,
    "indicator": "http://103.141.138.110/k/6f/mawa/6c82a18db78ef078a4d8.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279190,
    "indicator": "http://161.129.64.49/webpanel-divine/login.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279191,
    "indicator": "http://161.129.64.49/webpanel-divine/mawa/7dd66d9f8e1cf61ae198.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279192,
    "indicator": "http://180.214.239.67/k/login.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279193,
    "indicator": "http://180.214.239.67/k/p12l/inc/f938393de7cee3.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3300893218,
    "indicator": "404afe734de0bd19d2a25f85f28c860d",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279194,
    "indicator": "4425f4efa71c8709a2666d4478f382ce",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279195,
    "indicator": "4ef90c180e81bb4c7834c0da5872092c",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279196,
    "indicator": "57ef73ca8f0afbc260638c1dd668e4e4",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3300893220,
    "indicator": "7a8213b118b2c50cb31a17ef2412194d",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279197,
    "indicator": "7fb91a9310a590dc4fc91f0183c3c5a9",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279198,
    "indicator": "8f6578c81e677eb963c7c8164c414ee3",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279199,
    "indicator": "b1a471709f6fb58395e9c81a44f94bd7",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279200,
    "indicator": "b354a9e859952e1fcb1f2e27650ec5c9",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279201,
    "indicator": "b85fb5255a15d091277b8518d02500ce",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279202,
    "indicator": "c004124914c09d28a9bd99806e58605a",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279203,
    "indicator": "c721fa5ee7d7eb8336baeaab72390b3f",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279204,
    "indicator": "c86a89bfbb6695378fb207de8578d206",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279205,
    "indicator": "d6578c9f4802043a011ff44b79753636",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279206,
    "indicator": "ddb91a90eed20724950c62d3e15a7a10",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279207,
    "indicator": "e9c6b40bc5e5c33b2f4cb32bd3ce3d1a",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279208,
    "indicator": "eff0328870ecb6461aadba65abaeb06e",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279209,
    "indicator": "f0526bc7f32b879f170786e21061b425",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279210,
    "indicator": "f0b34ba48bf68057e6c5e68837141aab",
    "type": "FileHash-MD5",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279211,
    "indicator": "520585c44a0f6fbdbaaf7c43b8291f9421b2d1006eedfcbfbf17e7e60ff87abc",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279212,
    "indicator": "af2926ce207b2bc813c89d939aaa2b01138ddda63b46416647288d31a75bd226",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279213,
    "indicator": "b7e3573f18d53fb1647bf056583e3e284c2acb1b7f0a2f29592db8c80076d83e",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279214,
    "indicator": "d322164f81cf3f5c5c576a12e60be6fb27e4cc2e72085f500be81fda18272486",
    "type": "FileHash-SHA256",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345825,
    "indicator": "http://103.125.190.248/j/p14o/mawa/4d380a5d91252d890dc4.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345828,
    "indicator": "http://103.125.190.248/j/p15p/mawa/e483d6564638acbf4559.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345832,
    "indicator": "http://103.125.190.248/j/p17r/mawa/e6a2101b1d3a47e18c7f.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3284345835,
    "indicator": "http://103.125.190.248/j/p19t/mawa/48608c2b91739edc3959.php",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "ASCII text, with no line terminators",
    "description": "f510f3500a13fba4b8ffa86e801144d3bc72249aab2f830fc3fd8d187044c9eb",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279215,
    "indicator": "https://apt.thaicert.or.th/cgi-bin/showcard.cgi?g=Aggah",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279216,
    "indicator": "https://apt.thaicert.or.th/cgi-bin/showcard.cgi?g=Gorgon%20Group",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279217,
    "indicator": "https://website.informer.cosh-rat.com",
    "type": "URL",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279218,
    "indicator": "0ace1646c91551ba3a8aa87a87401e2c55de8ee6",
    "type": "YARA",
    "created": "2022-01-13T14:11:02",
    "content": "rule Alosh_Process_Hollowing_Mana_Campaign {\n    meta:\n      \tauthor = \"HomardBoy\"\n        description = \"Alosh RAT process hollowing program linked to the 2021 Gorgon Group APT\"\n    strings:\n        $str1 = \"alosh\" ascii\n        $str2 = \"projFUD\" ascii\n        $str3 = \"ZwUnmapViewOfSec\" ascii\n        $str4 = \"ResumeThread\" ascii\n        $str5 = \"WriteProcessMem\" ascii\n        $str6 = \"VirtualAll\" ascii\n        $str7 = \"CreateProc\" ascii\n    condition:\n        (uint16(0) == 0x5a4d and all of ($str*))\n}",
    "title": "",
    "description": "Alosh RAT process hollowing program linked to the 2021 Gorgon Group APT",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2854421480,
    "indicator": "apt.thaicert.or.th",
    "type": "hostname",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3355279219,
    "indicator": "website.informer.cosh-rat.com",
    "type": "hostname",
    "created": "2022-01-13T14:11:02",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  }
]