{ "type": "URL", "indicator": "https://live-hls-web-aje.getaj.net", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://live-hls-web-aje.getaj.net", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3383296478, "indicator": "https://live-hls-web-aje.getaj.net", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 11, "pulses": [ { "id": "69d4db11500ea6dcbc2afd10", "name": "ZETALYTICS.COM PT2 CREATED 2 YEARS AGO by StreamMiningEx Public TLP: Green clone", "description": "", "modified": "2026-04-07T10:23:13.255000", "created": "2026-04-07T10:23:13.255000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "65707f425121331bce0945cd", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 547, "FileHash-SHA256": 932, "URL": 1267, "domain": 140 }, "indicator_count": 2886, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "54 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570978ad58c756caaaf65fa", "name": "v2 - shopping_iframe_driver.js - and Related Hashes Samples that dropped this file", "description": "", "modified": "2023-12-06T15:47:22.317000", "created": "2023-12-06T15:47:22.317000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 521, "domain": 104, "hostname": 376, "URL": 1169, "FileHash-MD5": 8, "FileHash-SHA1": 2, "email": 1 }, "indicator_count": 2181, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657092f9499206cd87c73969", "name": "iphone", "description": "", "modified": "2023-12-06T15:27:53.981000", "created": "2023-12-06T15:27:53.981000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1768, "hostname": 808, "domain": 306, "URL": 1938, "FileHash-SHA1": 1 }, "indicator_count": 4821, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657080e2831409d23c8d24a5", "name": "iMessages.app 03.01.2022", "description": "", "modified": "2023-12-06T14:10:42.459000", "created": "2023-12-06T14:10:42.459000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1768, "hostname": 808, "domain": 306, "URL": 1937, "FileHash-SHA1": 1 }, "indicator_count": 4820, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707f425121331bce0945cd", "name": "ZETALYTICS.COM PT2", "description": "", "modified": "2023-12-06T14:03:46.820000", "created": "2023-12-06T14:03:46.820000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 547, "FileHash-SHA256": 932, "URL": 1267, "domain": 140 }, "indicator_count": 2886, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707ea9c0f2231d524c00ae", "name": "www.zetalytics.com", "description": "", "modified": "2023-12-06T14:01:12.637000", "created": "2023-12-06T14:01:12.637000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 747, "hostname": 368, "domain": 116, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63f62965a39ad88202f75fca", "name": "v2 - shopping_iframe_driver.js - and Related Hashes Samples that dropped this file", "description": "Here is the full report on the Falcon Sandbox malware analysis service, available to download and view at www.falcon.com (formerly Falcon MalQuery) and the BBC iPlayer.", "modified": "2023-03-24T14:03:40.832000", "created": "2023-02-22T14:40:37.370000", "tags": [ "docmarina", "qchlemail", "utfx86", "payment advice", "note", "vendor", "gf5de", "confirm", "payment receipt", "ach transfer", "sandbox", "malware", "analysis", "online", "submit", "vxstream", "sample", "download", "trojan", "apt", "ansi", "runtime data", "memoryfile scan", "ck id", "array", "typeerror", "typeof symbol", "mitre att", "show technique", "ck matrix", "date", "path", "error", "generator", "suspicious", "format", "void", "hybrid", "model", "general", "close", "click", "ransomware", "february", "strings", "malicious", "00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56", "shopping_iframe_driver.js" ], "references": [ "00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56", "https://hybrid-analysis.com/sample/00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56/63f3de2280658c708b639a72" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1010", "name": "Application Window Discovery", "display_name": "T1010 - Application Window Discovery" }, { "id": "T1012", "name": "Query Registry", "display_name": "T1012 - Query Registry" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1546", "name": "Event Triggered Execution", "display_name": "T1546 - Event Triggered Execution" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1614", "name": "System Location Discovery", "display_name": "T1614 - System Location Discovery" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 376, "URL": 1169, "domain": 104, "FileHash-SHA256": 521, "FileHash-MD5": 8, "FileHash-SHA1": 2, "email": 1 }, "indicator_count": 2181, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "1164 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6342b2b087554c9d5209b50b", "name": "iphone", "description": "", "modified": "2022-11-09T00:03:32.403000", "created": "2022-10-09T11:38:24.078000", "tags": [], "references": [ "iMessages.app" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "622775d4f2c38a89fdd0128a", "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Lazzo115", "id": "210949", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 306, "URL": 1938, "hostname": 808, "FileHash-SHA256": 1768, "FileHash-SHA1": 1 }, "indicator_count": 4821, "is_author": false, "is_subscribing": null, "subscriber_count": 8, "modified_text": "1299 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "622775d4f2c38a89fdd0128a", "name": "iMessages.app 03.01.2022", "description": "", "modified": "2022-04-07T00:04:02.553000", "created": "2022-03-08T15:27:16.349000", "tags": [], "references": [ "iMessages.app" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 306, "URL": 1937, "hostname": 808, "FileHash-SHA256": 1768, "FileHash-SHA1": 1 }, "indicator_count": 4820, "is_author": false, "is_subscribing": null, "subscriber_count": 407, "modified_text": "1515 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6219004f53e3ae2316efea12", "name": "ZETALYTICS.COM PT2", "description": "", "modified": "2022-03-27T00:00:39.057000", "created": "2022-02-25T16:14:07.302000", "tags": [ "ssl certificate", "whois", "whois record" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "China" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 547, "URL": 1267, "domain": 140, "FileHash-SHA256": 932 }, "indicator_count": 2886, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1526 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211eaee20bc9b0534df6133", "name": "www.zetalytics.com", "description": "", "modified": "2022-03-24T00:00:00.271000", "created": "2022-02-20T07:17:02.872000", "tags": [ "ssl certificate", "whois record", "whois", "key identifier", "x509v3 subject", "v3 serial", "number", "issuer", "cus cngo", "daddy secure", "g2 lscottsdale", "ouhttp", "validity", "info", "date", "tucows domains", "server", "algorithm", "iana id", "registrar url", "status", "registrar whois", "rank value", "ingestion time", "statvoo", "utc alexa", "utc cisco", "umbrella", "submission", "history first", "analysis", "utc http", "response final", "url https", "ip address", "status code", "body length", "kb body", "tools", "Ransomware", "POSSIBLE ETERNAL BLUE" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "China", "Australia", "Belgium" ], "malware_families": [ { "id": "TEL:NoPowShell!msil", "display_name": "TEL:NoPowShell!msil", "target": null }, { "id": "PWS:Win32/QQPass.GP", "display_name": "PWS:Win32/QQPass.GP", "target": "/malware/PWS:Win32/QQPass.GP" }, { "id": "Win.Malware.Razy-6783523-0", "display_name": "Win.Malware.Razy-6783523-0", "target": null }, { "id": "Win.Trojan.Pasta-827", "display_name": "Win.Trojan.Pasta-827", "target": null }, { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" }, { "id": "Win.Malware.Zusy-6840460-0", "display_name": "Win.Malware.Zusy-6840460-0", "target": null }, { "id": "Win.Trojan.Agent-1201096", "display_name": "Win.Trojan.Agent-1201096", "target": null }, { "id": "Win32:Dropper-GUP\\ [Drp]", "display_name": "Win32:Dropper-GUP\\ [Drp]", "target": null }, { "id": "Worm:Win32/Macoute", "display_name": "Worm:Win32/Macoute", "target": "/malware/Worm:Win32/Macoute" }, { "id": "Win32:Sobig-H\\ [Wrm]", "display_name": "Win32:Sobig-H\\ [Wrm]", "target": null }, { "id": "Win.Worm.Sobig-5", "display_name": "Win.Worm.Sobig-5", "target": null }, { "id": "Backdoor:Win32/Berbew", "display_name": "Backdoor:Win32/Berbew", "target": "/malware/Backdoor:Win32/Berbew" }, { "id": "Win.Trojan.Crypted-30", "display_name": "Win.Trojan.Crypted-30", "target": null }, { "id": "#VirTool:Win32/Obfuscator.ADB", "display_name": "#VirTool:Win32/Obfuscator.ADB", "target": "/malware/#VirTool:Win32/Obfuscator.ADB" }, { "id": "Win.Trojan.Kazy-6878", "display_name": "Win.Trojan.Kazy-6878", "target": null }, { "id": "Win32:VB-FBX", "display_name": "Win32:VB-FBX", "target": null }, { "id": "Win.Worm.Pajetbin-6726648-0", "display_name": "Win.Worm.Pajetbin-6726648-0", "target": null }, { "id": "Trojan:Win32/Vindor.B", "display_name": "Trojan:Win32/Vindor.B", "target": "/malware/Trojan:Win32/Vindor.B" }, { "id": "MSIL:BrowseFox-FC\\ [Adw]", "display_name": "MSIL:BrowseFox-FC\\ [Adw]", "target": null }, { "id": "Win.Ransomware.Teslacrypt-7082109-1", "display_name": "Win.Ransomware.Teslacrypt-7082109-1", "target": null }, { "id": "ALF:HSTR:Trojan:Win32/Injector.YY!bit", "display_name": "ALF:HSTR:Trojan:Win32/Injector.YY!bit", "target": null }, { "id": "Win32:Papras-AX\\ [Trj]", "display_name": "Win32:Papras-AX\\ [Trj]", "target": null }, { "id": "ALF:HSTR:MITM:UtilAds", "display_name": "ALF:HSTR:MITM:UtilAds", "target": null }, { "id": "Win.Malware.Autoit-6753917-0", "display_name": "Win.Malware.Autoit-6753917-0", "target": null } ], "attack_ids": [], "industries": [ "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 368, "URL": 747, "domain": 116, "FileHash-SHA256": 632, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 408, "modified_text": "1529 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56", "iMessages.app", "https://hybrid-analysis.com/sample/00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56/63f3de2280658c708b639a72" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Win.trojan.crypted-30", "Win32:dropper-gup\\ [drp]", "Win.trojan.pasta-827", "Alf:hstr:mitm:utilads", "Win32:vb-fbx", "Worm:win32/macoute", "Backdoor:win32/berbew", "Win.worm.sobig-5", "Win.trojan.kazy-6878", "Win.malware.autoit-6753917-0", "Alf:hstr:trojan:win32/injector.yy!bit", "Win.ransomware.teslacrypt-7082109-1", "Win.worm.pajetbin-6726648-0", "Win32:papras-ax\\ [trj]", "Tel:nopowshell!msil", "#virtool:win32/obfuscator.adb", "Win.malware.zusy-6840460-0", "Pws:win32/qqpass.gp", "Ransom:win32/wannaren.a", "Win.trojan.agent-1201096", "Win.malware.razy-6783523-0", "Trojan:win32/vindor.b", "Msil:browsefox-fc\\ [adw]", "Win32:sobig-h\\ [wrm]" ], "industries": [ "Technology" ], "unique_indicators": 10003 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/getaj.net", "whois": "http://whois.domaintools.com/getaj.net", "domain": "getaj.net", "hostname": "live-hls-web-aje.getaj.net" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 11, "pulses": [ { "id": "69d4db11500ea6dcbc2afd10", "name": "ZETALYTICS.COM PT2 CREATED 2 YEARS AGO by StreamMiningEx Public TLP: Green clone", "description": "", "modified": "2026-04-07T10:23:13.255000", "created": "2026-04-07T10:23:13.255000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "65707f425121331bce0945cd", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 547, "FileHash-SHA256": 932, "URL": 1267, "domain": 140 }, "indicator_count": 2886, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "54 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570978ad58c756caaaf65fa", "name": "v2 - shopping_iframe_driver.js - and Related Hashes Samples that dropped this file", "description": "", "modified": "2023-12-06T15:47:22.317000", "created": "2023-12-06T15:47:22.317000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 521, "domain": 104, "hostname": 376, "URL": 1169, "FileHash-MD5": 8, "FileHash-SHA1": 2, "email": 1 }, "indicator_count": 2181, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657092f9499206cd87c73969", "name": "iphone", "description": "", "modified": "2023-12-06T15:27:53.981000", "created": "2023-12-06T15:27:53.981000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1768, "hostname": 808, "domain": 306, "URL": 1938, "FileHash-SHA1": 1 }, "indicator_count": 4821, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657080e2831409d23c8d24a5", "name": "iMessages.app 03.01.2022", "description": "", "modified": "2023-12-06T14:10:42.459000", "created": "2023-12-06T14:10:42.459000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1768, "hostname": 808, "domain": 306, "URL": 1937, "FileHash-SHA1": 1 }, "indicator_count": 4820, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707f425121331bce0945cd", "name": "ZETALYTICS.COM PT2", "description": "", "modified": "2023-12-06T14:03:46.820000", "created": "2023-12-06T14:03:46.820000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 547, "FileHash-SHA256": 932, "URL": 1267, "domain": 140 }, "indicator_count": 2886, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707ea9c0f2231d524c00ae", "name": "www.zetalytics.com", "description": "", "modified": "2023-12-06T14:01:12.637000", "created": "2023-12-06T14:01:12.637000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 747, "hostname": 368, "domain": 116, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63f62965a39ad88202f75fca", "name": "v2 - shopping_iframe_driver.js - and Related Hashes Samples that dropped this file", "description": "Here is the full report on the Falcon Sandbox malware analysis service, available to download and view at www.falcon.com (formerly Falcon MalQuery) and the BBC iPlayer.", "modified": "2023-03-24T14:03:40.832000", "created": "2023-02-22T14:40:37.370000", "tags": [ "docmarina", "qchlemail", "utfx86", "payment advice", "note", "vendor", "gf5de", "confirm", "payment receipt", "ach transfer", "sandbox", "malware", "analysis", "online", "submit", "vxstream", "sample", "download", "trojan", "apt", "ansi", "runtime data", "memoryfile scan", "ck id", "array", "typeerror", "typeof symbol", "mitre att", "show technique", "ck matrix", "date", "path", "error", "generator", "suspicious", "format", "void", "hybrid", "model", "general", "close", "click", "ransomware", "february", "strings", "malicious", "00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56", "shopping_iframe_driver.js" ], "references": [ "00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56", "https://hybrid-analysis.com/sample/00eb49d81e1ca0b23a15e3d902e3ee40f5069da86e6f31d79424e97c70471d56/63f3de2280658c708b639a72" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1010", "name": "Application Window Discovery", "display_name": "T1010 - Application Window Discovery" }, { "id": "T1012", "name": "Query Registry", "display_name": "T1012 - Query Registry" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1546", "name": "Event Triggered Execution", "display_name": "T1546 - Event Triggered Execution" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1614", "name": "System Location Discovery", "display_name": "T1614 - System Location Discovery" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 376, "URL": 1169, "domain": 104, "FileHash-SHA256": 521, "FileHash-MD5": 8, "FileHash-SHA1": 2, "email": 1 }, "indicator_count": 2181, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "1164 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6342b2b087554c9d5209b50b", "name": "iphone", "description": "", "modified": "2022-11-09T00:03:32.403000", "created": "2022-10-09T11:38:24.078000", "tags": [], "references": [ "iMessages.app" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "622775d4f2c38a89fdd0128a", "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Lazzo115", "id": "210949", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 306, "URL": 1938, "hostname": 808, "FileHash-SHA256": 1768, "FileHash-SHA1": 1 }, "indicator_count": 4821, "is_author": false, "is_subscribing": null, "subscriber_count": 8, "modified_text": "1299 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "622775d4f2c38a89fdd0128a", "name": "iMessages.app 03.01.2022", "description": "", "modified": "2022-04-07T00:04:02.553000", "created": "2022-03-08T15:27:16.349000", "tags": [], "references": [ "iMessages.app" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 306, "URL": 1937, "hostname": 808, "FileHash-SHA256": 1768, "FileHash-SHA1": 1 }, "indicator_count": 4820, "is_author": false, "is_subscribing": null, "subscriber_count": 407, "modified_text": "1515 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6219004f53e3ae2316efea12", "name": "ZETALYTICS.COM PT2", "description": "", "modified": "2022-03-27T00:00:39.057000", "created": "2022-02-25T16:14:07.302000", "tags": [ "ssl certificate", "whois", "whois record" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "China" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 547, "URL": 1267, "domain": 140, "FileHash-SHA256": 932 }, "indicator_count": 2886, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1526 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://live-hls-web-aje.getaj.net", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://live-hls-web-aje.getaj.net", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780249442.515288 }