[
  {
    "id": 3389216151,
    "indicator": "0ceb38f7c3d464a8268f67559755b216",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "#Lowfi:SIGATTR:PossibleIMSteal",
    "description": "MD5 of 793e43699602c78105abd265fbbb00a4cfe03755",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4138773341,
    "indicator": "0fcd0296caead9343fcdad3584f64a18",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "ALF:Trojan:Win32/Cassini_539ed36b!ibt",
    "description": "MD5 of 22932aac0e65e2013428d5cae7cd76fb4682b012",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3667742028,
    "indicator": "19dbffec4e359a198daf4ffca1ab9165",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "compromised_site_redirector_fromcharcode",
    "description": "MD5 of d7ba13662fbfb254acaad7ae10ad51e0bd631933",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4147271923,
    "indicator": "298ef0317beb4d6c3e1f1dbe1ee6f244",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "MD5 of a45ca236442a7ed36ac9dec298fb2eef7766652b",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589494,
    "indicator": "2cf6a67e6043747d90e1bc0ce69a974a",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "MD5 of abeb2abdf0eb7bcab61605bae95618f394ba8835",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3667737953,
    "indicator": "aac5a52b939f3fe792726a13ff7a1747",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "stack_string",
    "description": "MD5 of f6760fb1f8b019af2304ea6410001b63a1809f1d",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589495,
    "indicator": "ad90013ab20c2bc2da850a45a9f5d3c8",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "Linux_Backdoor_PondRAT",
    "description": "MD5 of c5b998332f57ba49ded8d79c255aa18d38c8e7dd",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589496,
    "indicator": "cab3948912818c6a44a52ed44017b43a",
    "type": "FileHash-MD5",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "MD5 of 5aac78b6ee9784d9d021b2e326adcdd770d1bd2a",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4138773345,
    "indicator": "22932aac0e65e2013428d5cae7cd76fb4682b012",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "ALF:Trojan:Win32/Cassini_539ed36b!ibt",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589497,
    "indicator": "5aac78b6ee9784d9d021b2e326adcdd770d1bd2a",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3389216152,
    "indicator": "793e43699602c78105abd265fbbb00a4cfe03755",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "#Lowfi:SIGATTR:PossibleIMSteal",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4148209035,
    "indicator": "a45ca236442a7ed36ac9dec298fb2eef7766652b",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589498,
    "indicator": "abeb2abdf0eb7bcab61605bae95618f394ba8835",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589499,
    "indicator": "c5b998332f57ba49ded8d79c255aa18d38c8e7dd",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "Linux_Backdoor_PondRAT",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3667742032,
    "indicator": "d7ba13662fbfb254acaad7ae10ad51e0bd631933",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "compromised_site_redirector_fromcharcode",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3667737961,
    "indicator": "f6760fb1f8b019af2304ea6410001b63a1809f1d",
    "type": "FileHash-SHA1",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "stack_string",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3667742033,
    "indicator": "24d5dd3006c63d0f46fb33cbc1f576325d4e7e03e3201ff4a3c1ffa604f1b74a",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "compromised_site_redirector_fromcharcode",
    "description": "SHA256 of d7ba13662fbfb254acaad7ae10ad51e0bd631933",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4138773347,
    "indicator": "36541fad68e79cdedb965b1afcdc45385646611aa72903ddbe9d4d064d7bffb9",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "ALF:Trojan:Win32/Cassini_539ed36b!ibt",
    "description": "SHA256 of 22932aac0e65e2013428d5cae7cd76fb4682b012",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4126123234,
    "indicator": "85045d9898d28c9cdc4ed0ca5d76eceb457d741c5ca84bb753dde1bea980b516",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "SHA256 of 5aac78b6ee9784d9d021b2e326adcdd770d1bd2a",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4146404242,
    "indicator": "a3876a2492f3c069c0c2b2f155b4c420d8722aa7781040b17ca27fdd4f2ce6a9",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "SHA256 of a45ca236442a7ed36ac9dec298fb2eef7766652b",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4164589500,
    "indicator": "a5350b1735190a9a275208193836432ed99c54c12c75ba6d7d4cb9838d2e2106",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "Linux_Backdoor_PondRAT",
    "description": "SHA256 of c5b998332f57ba49ded8d79c255aa18d38c8e7dd",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3389216161,
    "indicator": "bc7bd27e94e24a301edb3d3e7fad982225ac59430fc476bda4e1459faa1c1647",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "#Lowfi:SIGATTR:PossibleIMSteal",
    "description": "SHA256 of 793e43699602c78105abd265fbbb00a4cfe03755",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3667737963,
    "indicator": "cc307cfb401d1ae616445e78b610ab72e1c7fb49b298ea003dd26ea80372089a",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "stack_string",
    "description": "SHA256 of f6760fb1f8b019af2304ea6410001b63a1809f1d",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4126123241,
    "indicator": "ff32bc1c756d560d8a9815db458f438d63b1dcb7e9930ef5b8639a55fa7762c9",
    "type": "FileHash-SHA256",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "is__elf",
    "description": "SHA256 of abeb2abdf0eb7bcab61605bae95618f394ba8835",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4166749038,
    "indicator": "http://119.6.56.194:9999/",
    "type": "URL",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4166749039,
    "indicator": "http://149.28.139.62:8080/",
    "type": "URL",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4166749040,
    "indicator": "http://207.254.22.248:8800/",
    "type": "URL",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4166749041,
    "indicator": "http://23.27.140.49:8080/",
    "type": "URL",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2636089836,
    "indicator": "secondshop.store",
    "type": "domain",
    "created": "2025-12-22T03:32:17",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  }
]