{ "type": "URL", "indicator": "https://cdn.staticfile.org/angular.js/1.6.9/angular", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://cdn.staticfile.org/angular.js/1.6.9/angular", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3098570346, "indicator": "https://cdn.staticfile.org/angular.js/1.6.9/angular", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 14, "pulses": [ { "id": "65708e254b734f1efd8bd0ad", "name": "1688.com .. 404-\u963f\u91cc\u5df4\u5df4", "description": "", "modified": "2023-12-06T15:07:17.380000", "created": "2023-12-06T15:07:17.380000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1645, "URL": 8598, "domain": 1004, "hostname": 2066, "FileHash-MD5": 3 }, "indicator_count": 13316, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b4fe416f6d10793d0d0", "name": "malware", "description": "", "modified": "2023-12-06T14:55:11.659000", "created": "2023-12-06T14:55:11.659000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 112, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b44eddb0e778213b050", "name": "malware", "description": "", "modified": "2023-12-06T14:55:00.045000", "created": "2023-12-06T14:55:00.045000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b383c8b03479a9c500f", "name": "malware", "description": "", "modified": "2023-12-06T14:54:48.631000", "created": "2023-12-06T14:54:48.631000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b2e1289df77178ac02a", "name": "malware", "description": "", "modified": "2023-12-06T14:54:38.099000", "created": "2023-12-06T14:54:38.099000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b21e8b64037edbd6a89", "name": "malware", "description": "", "modified": "2023-12-06T14:54:25.584000", "created": "2023-12-06T14:54:25.584000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708acfbf9280d126a8e668", "name": "McKesson.com ~ 04.06.2022", "description": "", "modified": "2023-12-06T14:53:03.195000", "created": "2023-12-06T14:53:03.195000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1751, "hostname": 2775, "URL": 9984, "domain": 665, "email": 3, "FileHash-SHA1": 2, "FileHash-MD5": 4 }, "indicator_count": 15184, "is_author": false, "is_subscribing": null, "subscriber_count": 111, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624d8d844d2bc304c780d158", "name": "McKesson.com ~ 04.06.2022", "description": "", "modified": "2022-08-20T16:20:43.684000", "created": "2022-04-06T12:54:28.513000", "tags": [ "registrar csc", "date", "sophos health", "comodo valkyrie", "verdict mobile", "businesseconomy", "ranks rank", "value ingestion", "time majestic", "utc statvoo", "umbrella", "algorithm", "key identifier", "x509v3 subject", "data", "v3 serial", "number", "issuer", "atlas r3", "dv tls", "q1 oglobalsign", "server", "domain status", "code", "registrar abuse", "rancho cordova", "contact phone", "registrar url", "csc corporate", "domains", "community", "links https", "httponly", "submission", "samesitelax", "navlanguage1033", "sitecurrency840", "conttype", "userculture1033", "health comodo", "Ransomware" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Canada" ], "malware_families": [ { "id": "W32/Scribble-B", "display_name": "W32/Scribble-B", "target": null }, { "id": "Win32/Virut.E", "display_name": "Win32/Virut.E", "target": null }, { "id": "Trojan.Dropper.UXZ", "display_name": "Trojan.Dropper.UXZ", "target": null }, { "id": "Win32/Virut.NBP", "display_name": "Win32/Virut.NBP", "target": null }, { "id": "Win32:Vitro", "display_name": "Win32:Vitro", "target": null }, { "id": "W32/Virut.n.gen", "display_name": "W32/Virut.n.gen", "target": null }, { "id": "Backdoor.Win32.Pushdo.rns", "display_name": "Backdoor.Win32.Pushdo.rns", "target": null }, { "id": "PE_VIRUX.Q-1", "display_name": "PE_VIRUX.Q-1", "target": null }, { "id": "Win.Trojan.Agent-1139129", "display_name": "Win.Trojan.Agent-1139129", "target": null }, { "id": "W32.Virut.CF", "display_name": "W32.Virut.CF", "target": null }, { "id": "Virus:Win32/Virut.EPO", "display_name": "Virus:Win32/Virut.EPO", "target": "/malware/Virus:Win32/Virut.EPO" }, { "id": "Ransom:Win64/Gojdu.A", "display_name": "Ransom:Win64/Gojdu.A", "target": "/malware/Ransom:Win64/Gojdu.A" } ], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 9984, "hostname": 2775, "domain": 665, "FileHash-SHA256": 1751, "email": 3, "FileHash-SHA1": 2, "FileHash-MD5": 4 }, "indicator_count": 15184, "is_author": false, "is_subscribing": null, "subscriber_count": 410, "modified_text": "1381 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6280921bfbaf2aace62511f1", "name": "1688.com .. 404-\u963f\u91cc\u5df4\u5df4", "description": "Alibaba", "modified": "2022-06-14T00:00:05.659000", "created": "2022-05-15T05:39:39.040000", "tags": [ "typeerror", "object", "typeof t", "symbol", "typeof e", "typeof self", "webpackrequire", "typeof n", "json", "math", "body", "copyright", "apoorv saxena", "typeof", "typeof define", "detect ie", "typeof document", "substring", "\u963f\u91cc\u5df4\u5df4\uff0c1688\uff0c\u5fae\u5546\uff0c\u5fae\u5e97\uff0c\u8d27\u6e90\uff0c\u5973\u88c5\u6279\u53d1\uff0c\u7537\u88c5\uff0cb2b\uff0c\u6279\u53d1\uff0c\u91c7\u8d2d", "typeof symbol", "promise", "error", "date", "createclass", "array", "this", "typeof lib", "null", "mozilla", "regexp", "typeof require", "xmlhttprequest", "license", "xdomainrequest", "aplusscore", "s1e4", "cfunction", "html5", "span", "button", "android", "jupdate", "void", "webview", "kraken", "nundefined", "xfunction", "zfunction", "chrome", "xuexi", "nullj", "area", "mtopwvplugin", "activexobject", "post", "options", "function", "head", "delete", "false", "trace", "patch", "unknown", "alipay", "ff6a00", "opacity100", "opacity0", "f2f3f7", "e6e7eb", "f7f8fa", "helvetica neue", "helvetica", "tahoma", "arial", "\u963f\u91cc\u5df4\u5df4\uff0c\u91c7\u8d2d\u6279\u53d1\uff0c1688\uff0c\u884c\u4e1a\u95e8\u6237\uff0c\u7f51\u4e0a\u8d38\u6613\uff0cb2b\uff0c\u7535\u5b50\u5546\u52a1\uff0c\u5185\u8d38\uff0c\u5916\u8d38\uff0c\u6279\u53d1\uff0c\u884c\u4e1a\u8d44\u8baf\uff0c\u7f51\u4e0a\u8d38\u6613\uff0c\u7f51\u4e0a\u4ea4\u6613\uff0c\u4ea4\u6613\u5e02\u573a\uff0c\u5728", "1688", "1000", "yunos", "lazada", "http response", "gmt contenttype", "vary" ], "references": [ "xfe-URL-1688.com-stix2-2.1-export.json", "xfe-IP-47.89.52.178-stix2-2.1-export.json", "https://page.1688.com/shtml/static/wrongpage.html", "http://polyfill.alicdn.com/", "xfe-URL-Alijk.com-stix2-2.1-export.json", "http://i.alicdn.com/", "http://is.alicdn.com/", "http://1688.com/", "https://mind.1688.com/wap/wapsy/dke4eosa0/index.html?no_cache=true&pageId=1150842&cms_id=1150842&src=desktop", "xfe-URL-mind.1688.com-stix2-2.1-export.json", "https://g.alicdn.com/secdev/sufei_data/3.9.9/index.js", "https://g.alicdn.com/alilog/mlog/aplus_wap.js", "https://mind.1688.com/zsh/zsh/d9my57ugj/index.html", "https://gw.alipayobjects.com/os/lib/lozad/1.16.0/dist/lozad.min.js", "http://g.alicdn.com/assets-group/croco/0.0.8/index.js" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8598, "hostname": 2066, "domain": 1004, "FileHash-SHA256": 1645, "FileHash-MD5": 3 }, "indicator_count": 13316, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "1448 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624fd91848164eef74985f1a", "name": "malware", "description": "", "modified": "2022-05-08T00:03:14.586000", "created": "2022-04-08T06:41:28.719000", "tags": [ "filehashsha256", "ipv4", "quaqv1", "prvideo", "ptsnmapp", "bdunknown", "dvs898tp", "mdlenovoa360t", "mflenovo", "zoneid", "core", "explorer", "service", "demo", "model" ], "references": [ "624d8d844d2bc304c780d158.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tthanhtung643@gmail.com", "id": "187831", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 781, "FileHash-SHA1": 499, "FileHash-SHA256": 1778, "CIDR": 1, "SSLCertFingerprint": 18, "URL": 9459, "domain": 692, "email": 9, "hostname": 3563 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 42, "modified_text": "1485 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624fd91a4f52435d6ab3002a", "name": "malware", "description": "", "modified": "2022-05-08T00:03:14.586000", "created": "2022-04-08T06:41:30.292000", "tags": [ "filehashsha256", "ipv4", "quaqv1", "prvideo", "ptsnmapp", "bdunknown", "dvs898tp", "mdlenovoa360t", "mflenovo", "zoneid", "core", "explorer", "service", "demo", "model" ], "references": [ "624d8d844d2bc304c780d158.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tthanhtung643@gmail.com", "id": "187831", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 781, "FileHash-SHA1": 499, "FileHash-SHA256": 1778, "CIDR": 1, "SSLCertFingerprint": 18, "URL": 9459, "domain": 692, "email": 9, "hostname": 3563 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 41, "modified_text": "1485 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624fd9250470ff789e1b6142", "name": "malware", "description": "", "modified": "2022-05-08T00:03:14.586000", "created": "2022-04-08T06:41:41.637000", "tags": [ "filehashsha256", "ipv4", "quaqv1", "prvideo", "ptsnmapp", "bdunknown", "dvs898tp", "mdlenovoa360t", "mflenovo", "zoneid", "core", "explorer", "service", "demo", "model" ], "references": [ "624d8d844d2bc304c780d158.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tthanhtung643@gmail.com", "id": "187831", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 781, "FileHash-SHA1": 499, "FileHash-SHA256": 1778, "CIDR": 1, "SSLCertFingerprint": 18, "URL": 9459, "domain": 692, "email": 9, "hostname": 3563 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 40, "modified_text": "1485 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624fd927bbc761bd6c6a426d", "name": "malware", "description": "", "modified": "2022-05-08T00:03:14.586000", "created": "2022-04-08T06:41:43.346000", "tags": [ "filehashsha256", "ipv4", "quaqv1", "prvideo", "ptsnmapp", "bdunknown", "dvs898tp", "mdlenovoa360t", "mflenovo", "zoneid", "core", "explorer", "service", "demo", "model" ], "references": [ "624d8d844d2bc304c780d158.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tthanhtung643@gmail.com", "id": "187831", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 781, "FileHash-SHA1": 499, "FileHash-SHA256": 1778, "CIDR": 1, "SSLCertFingerprint": 18, "URL": 9459, "domain": 692, "email": 9, "hostname": 3563 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 40, "modified_text": "1485 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624fd927e52d5ef693a5cd77", "name": "malware", "description": "", "modified": "2022-05-08T00:03:14.586000", "created": "2022-04-08T06:41:43.877000", "tags": [ "filehashsha256", "ipv4", "quaqv1", "prvideo", "ptsnmapp", "bdunknown", "dvs898tp", "mdlenovoa360t", "mflenovo", "zoneid", "core", "explorer", "service", "demo", "model" ], "references": [ "624d8d844d2bc304c780d158.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tthanhtung643@gmail.com", "id": "187831", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 781, "FileHash-SHA1": 499, "FileHash-SHA256": 1778, "CIDR": 1, "SSLCertFingerprint": 18, "URL": 9459, "domain": 692, "email": 9, "hostname": 3563 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 43, "modified_text": "1485 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "http://1688.com/", "xfe-URL-mind.1688.com-stix2-2.1-export.json", "http://is.alicdn.com/", "http://g.alicdn.com/assets-group/croco/0.0.8/index.js", "xfe-URL-Alijk.com-stix2-2.1-export.json", "https://gw.alipayobjects.com/os/lib/lozad/1.16.0/dist/lozad.min.js", "http://polyfill.alicdn.com/", "http://i.alicdn.com/", "https://g.alicdn.com/alilog/mlog/aplus_wap.js", "xfe-URL-1688.com-stix2-2.1-export.json", "https://mind.1688.com/zsh/zsh/d9my57ugj/index.html", "624d8d844d2bc304c780d158.csv", "https://mind.1688.com/wap/wapsy/dke4eosa0/index.html?no_cache=true&pageId=1150842&cms_id=1150842&src=desktop", "https://page.1688.com/shtml/static/wrongpage.html", "https://g.alicdn.com/secdev/sufei_data/3.9.9/index.js", "xfe-IP-47.89.52.178-stix2-2.1-export.json" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Backdoor.win32.pushdo.rns", "Win.trojan.agent-1139129", "Ransom:win64/gojdu.a", "W32/scribble-b", "W32/virut.n.gen", "Win32/virut.nbp", "Win32:vitro", "Virus:win32/virut.epo", "W32.virut.cf", "Pe_virux.q-1", "Win32/virut.e", "Trojan.dropper.uxz" ], "industries": [ "Healthcare" ], "unique_indicators": 31747 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/staticfile.org", "whois": "http://whois.domaintools.com/staticfile.org", "domain": "staticfile.org", "hostname": "cdn.staticfile.org" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 14, "pulses": [ { "id": "65708e254b734f1efd8bd0ad", "name": "1688.com .. 404-\u963f\u91cc\u5df4\u5df4", "description": "", "modified": "2023-12-06T15:07:17.380000", "created": "2023-12-06T15:07:17.380000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1645, "URL": 8598, "domain": 1004, "hostname": 2066, "FileHash-MD5": 3 }, "indicator_count": 13316, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b4fe416f6d10793d0d0", "name": "malware", "description": "", "modified": "2023-12-06T14:55:11.659000", "created": "2023-12-06T14:55:11.659000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 112, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b44eddb0e778213b050", "name": "malware", "description": "", "modified": "2023-12-06T14:55:00.045000", "created": "2023-12-06T14:55:00.045000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b383c8b03479a9c500f", "name": "malware", "description": "", "modified": "2023-12-06T14:54:48.631000", "created": "2023-12-06T14:54:48.631000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b2e1289df77178ac02a", "name": "malware", "description": "", "modified": "2023-12-06T14:54:38.099000", "created": "2023-12-06T14:54:38.099000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b21e8b64037edbd6a89", "name": "malware", "description": "", "modified": "2023-12-06T14:54:25.584000", "created": "2023-12-06T14:54:25.584000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708acfbf9280d126a8e668", "name": "McKesson.com ~ 04.06.2022", "description": "", "modified": "2023-12-06T14:53:03.195000", "created": "2023-12-06T14:53:03.195000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1751, "hostname": 2775, "URL": 9984, "domain": 665, "email": 3, "FileHash-SHA1": 2, "FileHash-MD5": 4 }, "indicator_count": 15184, "is_author": false, "is_subscribing": null, "subscriber_count": 111, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624d8d844d2bc304c780d158", "name": "McKesson.com ~ 04.06.2022", "description": "", "modified": "2022-08-20T16:20:43.684000", "created": "2022-04-06T12:54:28.513000", "tags": [ "registrar csc", "date", "sophos health", "comodo valkyrie", "verdict mobile", "businesseconomy", "ranks rank", "value ingestion", "time majestic", "utc statvoo", "umbrella", "algorithm", "key identifier", "x509v3 subject", "data", "v3 serial", "number", "issuer", "atlas r3", "dv tls", "q1 oglobalsign", "server", "domain status", "code", "registrar abuse", "rancho cordova", "contact phone", "registrar url", "csc corporate", "domains", "community", "links https", "httponly", "submission", "samesitelax", "navlanguage1033", "sitecurrency840", "conttype", "userculture1033", "health comodo", "Ransomware" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Canada" ], "malware_families": [ { "id": "W32/Scribble-B", "display_name": "W32/Scribble-B", "target": null }, { "id": "Win32/Virut.E", "display_name": "Win32/Virut.E", "target": null }, { "id": "Trojan.Dropper.UXZ", "display_name": "Trojan.Dropper.UXZ", "target": null }, { "id": "Win32/Virut.NBP", "display_name": "Win32/Virut.NBP", "target": null }, { "id": "Win32:Vitro", "display_name": "Win32:Vitro", "target": null }, { "id": "W32/Virut.n.gen", "display_name": "W32/Virut.n.gen", "target": null }, { "id": "Backdoor.Win32.Pushdo.rns", "display_name": "Backdoor.Win32.Pushdo.rns", "target": null }, { "id": "PE_VIRUX.Q-1", "display_name": "PE_VIRUX.Q-1", "target": null }, { "id": "Win.Trojan.Agent-1139129", "display_name": "Win.Trojan.Agent-1139129", "target": null }, { "id": "W32.Virut.CF", "display_name": "W32.Virut.CF", "target": null }, { "id": "Virus:Win32/Virut.EPO", "display_name": "Virus:Win32/Virut.EPO", "target": "/malware/Virus:Win32/Virut.EPO" }, { "id": "Ransom:Win64/Gojdu.A", "display_name": "Ransom:Win64/Gojdu.A", "target": "/malware/Ransom:Win64/Gojdu.A" } ], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 9984, "hostname": 2775, "domain": 665, "FileHash-SHA256": 1751, "email": 3, "FileHash-SHA1": 2, "FileHash-MD5": 4 }, "indicator_count": 15184, "is_author": false, "is_subscribing": null, "subscriber_count": 410, "modified_text": "1381 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6280921bfbaf2aace62511f1", "name": "1688.com .. 404-\u963f\u91cc\u5df4\u5df4", "description": "Alibaba", "modified": "2022-06-14T00:00:05.659000", "created": "2022-05-15T05:39:39.040000", "tags": [ "typeerror", "object", "typeof t", "symbol", "typeof e", "typeof self", "webpackrequire", "typeof n", "json", "math", "body", "copyright", "apoorv saxena", "typeof", "typeof define", "detect ie", "typeof document", "substring", "\u963f\u91cc\u5df4\u5df4\uff0c1688\uff0c\u5fae\u5546\uff0c\u5fae\u5e97\uff0c\u8d27\u6e90\uff0c\u5973\u88c5\u6279\u53d1\uff0c\u7537\u88c5\uff0cb2b\uff0c\u6279\u53d1\uff0c\u91c7\u8d2d", "typeof symbol", "promise", "error", "date", "createclass", "array", "this", "typeof lib", "null", "mozilla", "regexp", "typeof require", "xmlhttprequest", "license", "xdomainrequest", "aplusscore", "s1e4", "cfunction", "html5", "span", "button", "android", "jupdate", "void", "webview", "kraken", "nundefined", "xfunction", "zfunction", "chrome", "xuexi", "nullj", "area", "mtopwvplugin", "activexobject", "post", "options", "function", "head", "delete", "false", "trace", "patch", "unknown", "alipay", "ff6a00", "opacity100", "opacity0", "f2f3f7", "e6e7eb", "f7f8fa", "helvetica neue", "helvetica", "tahoma", "arial", "\u963f\u91cc\u5df4\u5df4\uff0c\u91c7\u8d2d\u6279\u53d1\uff0c1688\uff0c\u884c\u4e1a\u95e8\u6237\uff0c\u7f51\u4e0a\u8d38\u6613\uff0cb2b\uff0c\u7535\u5b50\u5546\u52a1\uff0c\u5185\u8d38\uff0c\u5916\u8d38\uff0c\u6279\u53d1\uff0c\u884c\u4e1a\u8d44\u8baf\uff0c\u7f51\u4e0a\u8d38\u6613\uff0c\u7f51\u4e0a\u4ea4\u6613\uff0c\u4ea4\u6613\u5e02\u573a\uff0c\u5728", "1688", "1000", "yunos", "lazada", "http response", "gmt contenttype", "vary" ], "references": [ "xfe-URL-1688.com-stix2-2.1-export.json", "xfe-IP-47.89.52.178-stix2-2.1-export.json", "https://page.1688.com/shtml/static/wrongpage.html", "http://polyfill.alicdn.com/", "xfe-URL-Alijk.com-stix2-2.1-export.json", "http://i.alicdn.com/", "http://is.alicdn.com/", "http://1688.com/", "https://mind.1688.com/wap/wapsy/dke4eosa0/index.html?no_cache=true&pageId=1150842&cms_id=1150842&src=desktop", "xfe-URL-mind.1688.com-stix2-2.1-export.json", "https://g.alicdn.com/secdev/sufei_data/3.9.9/index.js", "https://g.alicdn.com/alilog/mlog/aplus_wap.js", "https://mind.1688.com/zsh/zsh/d9my57ugj/index.html", "https://gw.alipayobjects.com/os/lib/lozad/1.16.0/dist/lozad.min.js", "http://g.alicdn.com/assets-group/croco/0.0.8/index.js" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8598, "hostname": 2066, "domain": 1004, "FileHash-SHA256": 1645, "FileHash-MD5": 3 }, "indicator_count": 13316, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "1448 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624fd91848164eef74985f1a", "name": "malware", "description": "", "modified": "2022-05-08T00:03:14.586000", "created": "2022-04-08T06:41:28.719000", "tags": [ "filehashsha256", "ipv4", "quaqv1", "prvideo", "ptsnmapp", "bdunknown", "dvs898tp", "mdlenovoa360t", "mflenovo", "zoneid", "core", "explorer", "service", "demo", "model" ], "references": [ "624d8d844d2bc304c780d158.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tthanhtung643@gmail.com", "id": "187831", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 781, "FileHash-SHA1": 499, "FileHash-SHA256": 1778, "CIDR": 1, "SSLCertFingerprint": 18, "URL": 9459, "domain": 692, "email": 9, "hostname": 3563 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 42, "modified_text": "1485 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://cdn.staticfile.org/angular.js/1.6.9/angular", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://cdn.staticfile.org/angular.js/1.6.9/angular", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780338311.0289087 }