[
  {
    "id": 3387125574,
    "indicator": "100.64.0.0/10",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3051710420,
    "indicator": "127.0.0.0/8",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3052555503,
    "indicator": "169.254.0.0/16",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3387126822,
    "indicator": "192.0.0.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134577,
    "indicator": "192.0.0.0/29",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3387126823,
    "indicator": "192.0.2.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134578,
    "indicator": "192.175.48.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134579,
    "indicator": "192.31.196.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134580,
    "indicator": "192.52.193.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134581,
    "indicator": "192.88.99.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3387126890,
    "indicator": "198.18.0.0/15",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3387126893,
    "indicator": "198.51.100.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3387126983,
    "indicator": "203.0.113.0/24",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3376906006,
    "indicator": "224.0.0.0/4",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3775955592,
    "indicator": "240.0.0.0/4",
    "type": "CIDR",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3869274354,
    "indicator": "da8ae8e1de522b20a462239c6893613e",
    "type": "FileHash-MD5",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "stack_string",
    "description": "MD5 of aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3869274361,
    "indicator": "7f65ef885815d81d220f9f42877ff0d696b0134c",
    "type": "FileHash-SHA1",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "stack_string",
    "description": "SHA1 of aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3868952427,
    "indicator": "aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c",
    "type": "FileHash-SHA256",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "stack_string",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134585,
    "indicator": "http://www.meow123.com/dll",
    "type": "URL",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3889852733,
    "indicator": "http://www.meow123.com/test",
    "type": "URL",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3868952452,
    "indicator": "https://aytobusesre.com/live/",
    "type": "URL",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3889852841,
    "indicator": "da45560d3d24464831b5f84de7e1fbb4d52b5c46",
    "type": "YARA",
    "created": "2024-05-20T10:10:38",
    "content": "rule Windows_Trojan_LATRODECTUS_841ff697 {   \n       meta:   \n           author = \"Elastic Security\"   \n           creation_date = \"2024-03-13\"   \n           last_modified = \"2024-04-05\"   \n           license = \"Elastic License v2\"   \n            os = \"Windows\"   \n           arch = \"x86\"   \n           threat_name = \"Windows.Trojan.LATRODECTUS\"   \n           reference_sample = \"aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c\"   \n      \n      \n       strings:   \n           $Str1 = { 48 83 EC 38 C6 44 24 20 73 C6 44 24 21 63 C6 44 24 22 75 C6 44 24 23 62 C6 44 24 24 }   \n           $crc32_loadlibrary = { 48 89 44 24 40 EB 02 EB 90 48 8B 4C 24 20 E8 ?? ?? FF FF 48 8B 44 24 40 48 81 C4 E8 02 00 00 C3 }   \n           $delete_self = { 44 24 68 BA 03 00 00 00 48 8B 4C 24 48 FF 15 ED D1 00 00 85 C0 75 14 48 8B 4C 24 50 E8 ?? ?? 00 00 B8 FF FF FF FF E9 A6 00 }   \n           $Str4 = { 89 44 24 44 EB 1F C7 44 24 20 00 00 00 00 45 33 C9 45 33 C0 33 D2 48 8B 4C 24 48 FF 15 7E BB 00 00 89 44 24 44 83 7C 24 44 00 75 02 EB 11 48 8B 44 24 48 EB 0C 33 C0 85 C0 0F 85 10 FE FF FF 33 }   \n           $handler_check = { 83 BC 24 D8 01 00 00 12 74 36 83 BC 24 D8 01 00 00 0E 74 2C 83 BC 24 D8 01 00 00 0C 74 22 83 BC 24 D8 01 00 00 0D 74 18 83 BC 24 D8 01 00 00 0F 74 0E 83 BC 24 D8 01 00 00 04 0F 85 44 02 00 00 }   \n           $hwid_calc = { 48 89 4C 24 08 48 8B 44 24 08 69 00 0D 66 19 00 48 8B 4C 24 08 89 01 48 8B 44 24 08 8B 00 C3 }   \n           $string_decrypt = { 89 44 24 ?? 48 8B 44 24 ?? 0F B7 40 ?? 8B 4C 24 ?? 33 C8 8B C1 66 89 44 24 ?? 48 8B 44 24 ?? 48 83 C0 ?? 48 89 44 24 ?? 33 C0 66 89 44 24 ?? EB ?? }   \n           $campaign_fnv = { 48 03 C8 48 8B C1 48 39 44 24 08 73 1E 48 8B 44 24 08 0F BE 00 8B 0C 24 33 C8 8B C1 89 04 24 69 04 24 93 01 00 01 89 04 24 EB BE }   \n       condition:   \n           2 of them   \n   }",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3868952459,
    "indicator": "aytobusesre.com",
    "type": "domain",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3626299305,
    "indicator": "gyxplonto.com",
    "type": "domain",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3218431770,
    "indicator": "host.name",
    "type": "domain",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3620865803,
    "indicator": "neaachar.com",
    "type": "domain",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2952018669,
    "indicator": "process.name",
    "type": "domain",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3855246762,
    "indicator": "scifimond.com",
    "type": "domain",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3891134586,
    "indicator": "logs-endpoint.events.network",
    "type": "hostname",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3889852734,
    "indicator": "www.meow123.com",
    "type": "hostname",
    "created": "2024-05-20T10:10:38",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  }
]