{ "type": "Domain", "indicator": "fvsra.org", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/fvsra.org", "alexa": "http://www.alexa.com/siteinfo/fvsra.org", "indicator": "fvsra.org", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3579437832, "indicator": "fvsra.org", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 7, "pulses": [ { "id": "6570937a4be22cb319878242", "name": "Twitter Feed - RedPacketSec - 29-10-2022", "description": "", "modified": "2023-12-06T15:30:02.144000", "created": "2023-12-06T15:30:02.144000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 61, "domain": 2 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64a258518fc6ba889180063c", "name": "Lockbit 3.0 ransomware", "description": "Lockbit 3.0 IOCs", "modified": "2023-08-02T05:05:56.326000", "created": "2023-07-03T05:10:41.315000", "tags": [], "references": [ "entities (61).csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "LockBit", "display_name": "LockBit", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 35, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "FileHash-MD5": 11, "FileHash-SHA1": 11, "FileHash-SHA256": 16, "domain": 162, "hostname": 2 }, "indicator_count": 203, "is_author": false, "is_subscribing": null, "subscriber_count": 74, "modified_text": "1034 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64744bd2355bab1ce35a2e8d", "name": "RagnarLocker", "description": "Recorded future: RagnarLocker IOCs", "modified": "2023-06-28T06:03:43.375000", "created": "2023-05-29T06:53:06.275000", "tags": [ "domain", "ip address", "hash", "email address" ], "references": [ "RagnarLocker.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "RagnarLocker (Windows)", "display_name": "RagnarLocker (Windows)", "target": null }, { "id": "RagnarLocker (ELF)", "display_name": "RagnarLocker (ELF)", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "email": 1, "FileHash-MD5": 6, "FileHash-SHA1": 6, "FileHash-SHA256": 8, "domain": 102, "hostname": 2 }, "indicator_count": 125, "is_author": false, "is_subscribing": null, "subscriber_count": 73, "modified_text": "1069 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6472e805e794ecc9ff63302a", "name": "Lockbit 3.0 ransomware", "description": "recorded future: Lockbit 3.0 ransomware", "modified": "2023-06-27T05:03:10.830000", "created": "2023-05-28T05:35:01.249000", "tags": [ "insikt group", "domain", "hashsha256", "hashsha1", "hash", "ip address" ], "references": [ "Lockbit 3.0 malware IOCs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "LockBit", "display_name": "LockBit", "target": null }, { "id": "ALF:Ransom:Win32/LockBit", "display_name": "ALF:Ransom:Win32/LockBit", "target": null }, { "id": "Ransom:Win32/LockBit", "display_name": "Ransom:Win32/LockBit", "target": "/malware/Ransom:Win32/LockBit" } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 40, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "FileHash-MD5": 10, "FileHash-SHA1": 18, "FileHash-SHA256": 22, "domain": 188, "hostname": 2 }, "indicator_count": 241, "is_author": false, "is_subscribing": null, "subscriber_count": 79, "modified_text": "1070 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64608bffd61b04fa6d8a97ac", "name": "BlackByte ransomware IOCs", "description": "recorded future: BlackByte ransomware IOCs", "modified": "2023-05-14T07:21:34.991000", "created": "2023-05-14T07:21:34.991000", "tags": [ "insikt group", "domain", "hash", "hashsha256", "email address", "hashsha512", "ip address", "hashsha1", "filename" ], "references": [ "BlackByte ransomware IOCs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 19, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "IPv4": 4, "FileHash-MD5": 11, "FileHash-SHA1": 19, "FileHash-SHA256": 15, "URL": 6, "domain": 237, "hostname": 3, "email": 2 }, "indicator_count": 297, "is_author": false, "is_subscribing": null, "subscriber_count": 75, "modified_text": "1114 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "646087013f41b1c66b008650", "name": "Lockbit 3.0 IOCs", "description": "recorded future: Lockbit 3.0 IOCs", "modified": "2023-05-14T07:00:17.800000", "created": "2023-05-14T07:00:17.800000", "tags": [ "insikt group", "domain", "hashsha1", "hash", "ip address", "filename" ], "references": [ "Lockbit 3.0 IOCs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 41, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "IPv4": 3, "FileHash-MD5": 3, "FileHash-SHA1": 11, "FileHash-SHA256": 3, "URL": 1, "domain": 193, "hostname": 2 }, "indicator_count": 216, "is_author": false, "is_subscribing": null, "subscriber_count": 77, "modified_text": "1114 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "635dbc3b961377f51d294ef3", "name": "Twitter Feed - RedPacketSec - 29-10-2022", "description": "", "modified": "2022-10-29T23:50:19.758000", "created": "2022-10-29T23:50:19.758000", "tags": [ "malware", "ransomware", "banker" ], "references": [ "https://twitter.com/RedPacketSec/status/1586222141774741505", "https://twitter.com/RedPacketSec/status/1586222140797353984", "https://twitter.com/RedPacketSec/status/1586222142793961474", "https://twitter.com/RedPacketSec/status/1586222143808970753", "https://twitter.com/RedPacketSec/status/1586222144782049281", "https://twitter.com/RedPacketSec/status/1586222145700519937", "https://twitter.com/RedPacketSec/status/1586222146686255104", "https://twitter.com/RedPacketSec/status/1586222150398234624", "https://twitter.com/RedPacketSec/status/1586222147566960640", "https://twitter.com/RedPacketSec/status/1586222149479665664", "https://twitter.com/RedPacketSec/status/1586222148460466177", "https://twitter.com/RedPacketSec/status/1586222152205975552", "https://twitter.com/RedPacketSec/status/1586222153074081793", "https://twitter.com/RedPacketSec/status/1586222151333515265", "https://twitter.com/RedPacketSec/status/1586222154063962112", "https://twitter.com/RedPacketSec/status/1586222157000052736", "https://twitter.com/RedPacketSec/status/1586222158006607872", "https://twitter.com/RedPacketSec/status/1586222155079073792", "https://twitter.com/RedPacketSec/status/1586222158992269312", "https://twitter.com/RedPacketSec/status/1586222156039569408", "https://twitter.com/RedPacketSec/status/1586222162804965378", "https://twitter.com/RedPacketSec/status/1586222161823514624", "https://twitter.com/RedPacketSec/status/1586222160963665921", "https://twitter.com/RedPacketSec/status/1586222159969525760", "https://twitter.com/RedPacketSec/status/1586222164734353408", "https://twitter.com/RedPacketSec/status/1586222163761287170", "https://twitter.com/RedPacketSec/status/1586222165694844929", "https://twitter.com/RedPacketSec/status/1586314739222827010", "https://twitter.com/RedPacketSec/status/1586405470260150272", "https://twitter.com/RedPacketSec/status/1586494162886688770", "https://twitter.com/RedPacketSec/status/1586494163817840642", "https://twitter.com/RedPacketSec/status/1586494164828561411", "https://twitter.com/RedPacketSec/status/1586494165738835968", "https://twitter.com/RedPacketSec/status/1586494166695133191", "https://twitter.com/RedPacketSec/status/1586494167718535168", "https://twitter.com/RedPacketSec/status/1586494168767004674", "https://twitter.com/RedPacketSec/status/1586494169773756416", "https://twitter.com/RedPacketSec/status/1586494170859978753", "https://twitter.com/RedPacketSec/status/1586494171925331975", "https://twitter.com/RedPacketSec/status/1586494172936245248", "https://twitter.com/RedPacketSec/status/1586494173917618176", "https://twitter.com/RedPacketSec/status/1586494174802706433", "https://twitter.com/RedPacketSec/status/1586494175679287296", "https://twitter.com/RedPacketSec/status/1586494176656515072", "https://twitter.com/RedPacketSec/status/1586494177650548743", "https://twitter.com/RedPacketSec/status/1586494178657243136", "https://twitter.com/RedPacketSec/status/1586494179651325953", "https://twitter.com/RedPacketSec/status/1586494180683030528", "https://twitter.com/RedPacketSec/status/1586494181580705792", "https://twitter.com/RedPacketSec/status/1586494183455563778", "https://twitter.com/RedPacketSec/status/1586494184369922049", "https://twitter.com/RedPacketSec/status/1586494185271660544", "https://twitter.com/RedPacketSec/status/1586494186311786498", "https://twitter.com/RedPacketSec/status/1586494187213561858", "https://twitter.com/RedPacketSec/status/1586494188128030721", "https://twitter.com/RedPacketSec/status/1586494189054959616", "https://twitter.com/RedPacketSec/status/1586494190149566466", "https://twitter.com/RedPacketSec/status/1586494191194017794", "https://twitter.com/RedPacketSec/status/1586494192192217088", "https://twitter.com/RedPacketSec/status/1586494193089781763", "https://twitter.com/RedPacketSec/status/1586494194046074882", "https://twitter.com/RedPacketSec/status/1586494195065298945", "https://twitter.com/RedPacketSec/status/1586494195996528645" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 61, "domain": 2 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1310 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://twitter.com/RedPacketSec/status/1586494187213561858", "https://twitter.com/RedPacketSec/status/1586494166695133191", "https://twitter.com/RedPacketSec/status/1586494181580705792", "https://twitter.com/RedPacketSec/status/1586405470260150272", "RagnarLocker.csv", "https://twitter.com/RedPacketSec/status/1586222144782049281", "Lockbit 3.0 IOCs.csv", "https://twitter.com/RedPacketSec/status/1586222157000052736", "https://twitter.com/RedPacketSec/status/1586494180683030528", "https://twitter.com/RedPacketSec/status/1586222141774741505", "https://twitter.com/RedPacketSec/status/1586222150398234624", "https://twitter.com/RedPacketSec/status/1586494174802706433", "https://twitter.com/RedPacketSec/status/1586494185271660544", "https://twitter.com/RedPacketSec/status/1586222149479665664", "https://twitter.com/RedPacketSec/status/1586494192192217088", "https://twitter.com/RedPacketSec/status/1586222158006607872", "https://twitter.com/RedPacketSec/status/1586222151333515265", "https://twitter.com/RedPacketSec/status/1586494163817840642", "https://twitter.com/RedPacketSec/status/1586494165738835968", "https://twitter.com/RedPacketSec/status/1586494190149566466", "https://twitter.com/RedPacketSec/status/1586222159969525760", "https://twitter.com/RedPacketSec/status/1586494195065298945", "entities (61).csv", "https://twitter.com/RedPacketSec/status/1586222165694844929", "https://twitter.com/RedPacketSec/status/1586494184369922049", "https://twitter.com/RedPacketSec/status/1586222147566960640", "https://twitter.com/RedPacketSec/status/1586494168767004674", "https://twitter.com/RedPacketSec/status/1586494171925331975", "https://twitter.com/RedPacketSec/status/1586494172936245248", "https://twitter.com/RedPacketSec/status/1586494195996528645", "https://twitter.com/RedPacketSec/status/1586222146686255104", "https://twitter.com/RedPacketSec/status/1586494177650548743", "https://twitter.com/RedPacketSec/status/1586222161823514624", "https://twitter.com/RedPacketSec/status/1586494183455563778", "https://twitter.com/RedPacketSec/status/1586494186311786498", "https://twitter.com/RedPacketSec/status/1586494191194017794", "https://twitter.com/RedPacketSec/status/1586222158992269312", "https://twitter.com/RedPacketSec/status/1586494194046074882", "Lockbit 3.0 malware IOCs.csv", "https://twitter.com/RedPacketSec/status/1586222142793961474", "https://twitter.com/RedPacketSec/status/1586222152205975552", "https://twitter.com/RedPacketSec/status/1586494178657243136", "https://twitter.com/RedPacketSec/status/1586222162804965378", "https://twitter.com/RedPacketSec/status/1586494173917618176", "https://twitter.com/RedPacketSec/status/1586222143808970753", "https://twitter.com/RedPacketSec/status/1586222156039569408", "https://twitter.com/RedPacketSec/status/1586222140797353984", "https://twitter.com/RedPacketSec/status/1586222154063962112", "https://twitter.com/RedPacketSec/status/1586222153074081793", "https://twitter.com/RedPacketSec/status/1586222155079073792", "https://twitter.com/RedPacketSec/status/1586494164828561411", "BlackByte ransomware IOCs.csv", "https://twitter.com/RedPacketSec/status/1586494176656515072", "https://twitter.com/RedPacketSec/status/1586222164734353408", "https://twitter.com/RedPacketSec/status/1586494170859978753", "https://twitter.com/RedPacketSec/status/1586494175679287296", "https://twitter.com/RedPacketSec/status/1586222145700519937", "https://twitter.com/RedPacketSec/status/1586222148460466177", "https://twitter.com/RedPacketSec/status/1586494169773756416", "https://twitter.com/RedPacketSec/status/1586494193089781763", "https://twitter.com/RedPacketSec/status/1586494162886688770", "https://twitter.com/RedPacketSec/status/1586222163761287170", "https://twitter.com/RedPacketSec/status/1586494167718535168", "https://twitter.com/RedPacketSec/status/1586494179651325953", "https://twitter.com/RedPacketSec/status/1586494188128030721", "https://twitter.com/RedPacketSec/status/1586494189054959616", "https://twitter.com/RedPacketSec/status/1586222160963665921", "https://twitter.com/RedPacketSec/status/1586314739222827010" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [ "Ransom:win32/lockbit", "Ragnarlocker (elf)", "Alf:ransom:win32/lockbit", "Ragnarlocker (windows)", "Lockbit" ], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 7, "pulses": [ { "id": "6570937a4be22cb319878242", "name": "Twitter Feed - RedPacketSec - 29-10-2022", "description": "", "modified": "2023-12-06T15:30:02.144000", "created": "2023-12-06T15:30:02.144000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 61, "domain": 2 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64a258518fc6ba889180063c", "name": "Lockbit 3.0 ransomware", "description": "Lockbit 3.0 IOCs", "modified": "2023-08-02T05:05:56.326000", "created": "2023-07-03T05:10:41.315000", "tags": [], "references": [ "entities (61).csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "LockBit", "display_name": "LockBit", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 35, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "FileHash-MD5": 11, "FileHash-SHA1": 11, "FileHash-SHA256": 16, "domain": 162, "hostname": 2 }, "indicator_count": 203, "is_author": false, "is_subscribing": null, "subscriber_count": 74, "modified_text": "1034 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64744bd2355bab1ce35a2e8d", "name": "RagnarLocker", "description": "Recorded future: RagnarLocker IOCs", "modified": "2023-06-28T06:03:43.375000", "created": "2023-05-29T06:53:06.275000", "tags": [ "domain", "ip address", "hash", "email address" ], "references": [ "RagnarLocker.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "RagnarLocker (Windows)", "display_name": "RagnarLocker (Windows)", "target": null }, { "id": "RagnarLocker (ELF)", "display_name": "RagnarLocker (ELF)", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "email": 1, "FileHash-MD5": 6, "FileHash-SHA1": 6, "FileHash-SHA256": 8, "domain": 102, "hostname": 2 }, "indicator_count": 125, "is_author": false, "is_subscribing": null, "subscriber_count": 73, "modified_text": "1069 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6472e805e794ecc9ff63302a", "name": "Lockbit 3.0 ransomware", "description": "recorded future: Lockbit 3.0 ransomware", "modified": "2023-06-27T05:03:10.830000", "created": "2023-05-28T05:35:01.249000", "tags": [ "insikt group", "domain", "hashsha256", "hashsha1", "hash", "ip address" ], "references": [ "Lockbit 3.0 malware IOCs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "LockBit", "display_name": "LockBit", "target": null }, { "id": "ALF:Ransom:Win32/LockBit", "display_name": "ALF:Ransom:Win32/LockBit", "target": null }, { "id": "Ransom:Win32/LockBit", "display_name": "Ransom:Win32/LockBit", "target": "/malware/Ransom:Win32/LockBit" } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 40, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "FileHash-MD5": 10, "FileHash-SHA1": 18, "FileHash-SHA256": 22, "domain": 188, "hostname": 2 }, "indicator_count": 241, "is_author": false, "is_subscribing": null, "subscriber_count": 79, "modified_text": "1070 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64608bffd61b04fa6d8a97ac", "name": "BlackByte ransomware IOCs", "description": "recorded future: BlackByte ransomware IOCs", "modified": "2023-05-14T07:21:34.991000", "created": "2023-05-14T07:21:34.991000", "tags": [ "insikt group", "domain", "hash", "hashsha256", "email address", "hashsha512", "ip address", "hashsha1", "filename" ], "references": [ "BlackByte ransomware IOCs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 19, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "IPv4": 4, "FileHash-MD5": 11, "FileHash-SHA1": 19, "FileHash-SHA256": 15, "URL": 6, "domain": 237, "hostname": 3, "email": 2 }, "indicator_count": 297, "is_author": false, "is_subscribing": null, "subscriber_count": 75, "modified_text": "1114 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "646087013f41b1c66b008650", "name": "Lockbit 3.0 IOCs", "description": "recorded future: Lockbit 3.0 IOCs", "modified": "2023-05-14T07:00:17.800000", "created": "2023-05-14T07:00:17.800000", "tags": [ "insikt group", "domain", "hashsha1", "hash", "ip address", "filename" ], "references": [ "Lockbit 3.0 IOCs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 41, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "akhanafeer", "id": "195327", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "IPv4": 3, "FileHash-MD5": 3, "FileHash-SHA1": 11, "FileHash-SHA256": 3, "URL": 1, "domain": 193, "hostname": 2 }, "indicator_count": 216, "is_author": false, "is_subscribing": null, "subscriber_count": 77, "modified_text": "1114 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "635dbc3b961377f51d294ef3", "name": "Twitter Feed - RedPacketSec - 29-10-2022", "description": "", "modified": "2022-10-29T23:50:19.758000", "created": "2022-10-29T23:50:19.758000", "tags": [ "malware", "ransomware", "banker" ], "references": [ "https://twitter.com/RedPacketSec/status/1586222141774741505", "https://twitter.com/RedPacketSec/status/1586222140797353984", "https://twitter.com/RedPacketSec/status/1586222142793961474", "https://twitter.com/RedPacketSec/status/1586222143808970753", "https://twitter.com/RedPacketSec/status/1586222144782049281", "https://twitter.com/RedPacketSec/status/1586222145700519937", "https://twitter.com/RedPacketSec/status/1586222146686255104", "https://twitter.com/RedPacketSec/status/1586222150398234624", "https://twitter.com/RedPacketSec/status/1586222147566960640", "https://twitter.com/RedPacketSec/status/1586222149479665664", "https://twitter.com/RedPacketSec/status/1586222148460466177", "https://twitter.com/RedPacketSec/status/1586222152205975552", "https://twitter.com/RedPacketSec/status/1586222153074081793", "https://twitter.com/RedPacketSec/status/1586222151333515265", "https://twitter.com/RedPacketSec/status/1586222154063962112", "https://twitter.com/RedPacketSec/status/1586222157000052736", "https://twitter.com/RedPacketSec/status/1586222158006607872", "https://twitter.com/RedPacketSec/status/1586222155079073792", "https://twitter.com/RedPacketSec/status/1586222158992269312", "https://twitter.com/RedPacketSec/status/1586222156039569408", "https://twitter.com/RedPacketSec/status/1586222162804965378", "https://twitter.com/RedPacketSec/status/1586222161823514624", "https://twitter.com/RedPacketSec/status/1586222160963665921", "https://twitter.com/RedPacketSec/status/1586222159969525760", "https://twitter.com/RedPacketSec/status/1586222164734353408", "https://twitter.com/RedPacketSec/status/1586222163761287170", "https://twitter.com/RedPacketSec/status/1586222165694844929", "https://twitter.com/RedPacketSec/status/1586314739222827010", "https://twitter.com/RedPacketSec/status/1586405470260150272", "https://twitter.com/RedPacketSec/status/1586494162886688770", "https://twitter.com/RedPacketSec/status/1586494163817840642", "https://twitter.com/RedPacketSec/status/1586494164828561411", "https://twitter.com/RedPacketSec/status/1586494165738835968", "https://twitter.com/RedPacketSec/status/1586494166695133191", "https://twitter.com/RedPacketSec/status/1586494167718535168", "https://twitter.com/RedPacketSec/status/1586494168767004674", "https://twitter.com/RedPacketSec/status/1586494169773756416", "https://twitter.com/RedPacketSec/status/1586494170859978753", "https://twitter.com/RedPacketSec/status/1586494171925331975", "https://twitter.com/RedPacketSec/status/1586494172936245248", "https://twitter.com/RedPacketSec/status/1586494173917618176", "https://twitter.com/RedPacketSec/status/1586494174802706433", "https://twitter.com/RedPacketSec/status/1586494175679287296", "https://twitter.com/RedPacketSec/status/1586494176656515072", "https://twitter.com/RedPacketSec/status/1586494177650548743", "https://twitter.com/RedPacketSec/status/1586494178657243136", "https://twitter.com/RedPacketSec/status/1586494179651325953", "https://twitter.com/RedPacketSec/status/1586494180683030528", "https://twitter.com/RedPacketSec/status/1586494181580705792", "https://twitter.com/RedPacketSec/status/1586494183455563778", "https://twitter.com/RedPacketSec/status/1586494184369922049", "https://twitter.com/RedPacketSec/status/1586494185271660544", "https://twitter.com/RedPacketSec/status/1586494186311786498", "https://twitter.com/RedPacketSec/status/1586494187213561858", "https://twitter.com/RedPacketSec/status/1586494188128030721", "https://twitter.com/RedPacketSec/status/1586494189054959616", "https://twitter.com/RedPacketSec/status/1586494190149566466", "https://twitter.com/RedPacketSec/status/1586494191194017794", "https://twitter.com/RedPacketSec/status/1586494192192217088", "https://twitter.com/RedPacketSec/status/1586494193089781763", "https://twitter.com/RedPacketSec/status/1586494194046074882", "https://twitter.com/RedPacketSec/status/1586494195065298945", "https://twitter.com/RedPacketSec/status/1586494195996528645" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 61, "domain": 2 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1310 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "fvsra.org", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "fvsra.org", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780324279.3692708 }