[
  {
    "id": 4055817398,
    "indicator": "xvfrhxcd.outbound-mail.sendgrid.net",
    "type": "hostname",
    "created": "2025-04-08T09:18:55",
    "content": "",
    "title": "Mail Subject \"R: R: R: R: R: R: R: New order\"",
    "description": "Attachment = SWIFT2024001013.docx (malicious macro)",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4055817399,
    "indicator": "9db5584eca2b1e730f43a22fe423d3d6",
    "type": "FileHash-MD5",
    "created": "2025-04-08T09:18:55",
    "content": "",
    "title": "Malicious attachment Hash",
    "description": "SWIFT2024001013.docx (malicious macro)",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4055817400,
    "indicator": "96a491acb5e0ab5d9d1bcb92720382ba9d959e02",
    "type": "FileHash-SHA1",
    "created": "2025-04-08T09:18:55",
    "content": "",
    "title": "Malicious attachment Hash",
    "description": "SWIFT2024001013.docx (malicious macro)",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4055817401,
    "indicator": "12898ccc6a9cf84dda412ea2bc17de58de6742ffae8392a84294fb7f95fcde27",
    "type": "FileHash-SHA256",
    "created": "2025-04-08T09:18:55",
    "content": "",
    "title": "Malicious attachment Hash",
    "description": "SWIFT2024001013.docx (malicious macro)",
    "expiration": null,
    "is_active": 1
  }
]