{
"type": "URL",
"indicator": "https://m.hh-infra.com",
"general": {
"sections": [
"general",
"url_list",
"http_scans",
"screenshot"
],
"indicator": "https://m.hh-infra.com",
"type": "url",
"type_title": "URL",
"validation": [],
"base_indicator": {
"id": 3375781341,
"indicator": "https://m.hh-infra.com",
"type": "URL",
"title": "",
"description": "",
"content": "",
"access_type": "public",
"access_reason": ""
},
"pulse_info": {
"count": 38,
"pulses": [
{
"id": "69e49bea0264fa25070a3dad",
"name": "20.42.65.92 - 172.16.10.101 clone dorkingbeauty1",
"description": "",
"modified": "2026-04-19T12:07:02.826000",
"created": "2026-04-19T09:10:02.057000",
"tags": [
"tls callback",
"static parser",
"000040fea7dbc370886d902adcd976e7c18703a9bba57409f4fcf1473a8f00f2",
"20.42.65.92"
],
"references": [
"000040fea7dbc370886d902adcd976e7c18703a9bba57409f4fcf1473a8f00f2"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": "621ef2c06e9f5e7c4676d39d",
"export_count": 1,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "msudosos",
"id": "381696",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 434,
"FileHash-SHA256": 1071,
"URL": 1377,
"domain": 135,
"JA3": 1
},
"indicator_count": 3018,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 48,
"modified_text": "11 hours ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "657092f9499206cd87c73969",
"name": "iphone",
"description": "",
"modified": "2023-12-06T15:27:53.981000",
"created": "2023-12-06T15:27:53.981000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1768,
"hostname": 808,
"domain": 306,
"URL": 1938,
"FileHash-SHA1": 1
},
"indicator_count": 4821,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "657090132deb7fd89b09d555",
"name": "a whole bunch of hell effected by the recent mozilla/firefox vulns",
"description": "",
"modified": "2023-12-06T15:15:31.177000",
"created": "2023-12-06T15:15:31.177000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 825,
"domain": 308,
"URL": 2036,
"FileHash-SHA256": 2141
},
"indicator_count": 5310,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708fdef7d4b5483117bb67",
"name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances",
"description": "",
"modified": "2023-12-06T15:14:38.824000",
"created": "2023-12-06T15:14:38.824000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 812,
"domain": 110,
"hostname": 502,
"URL": 1437
},
"indicator_count": 2861,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708e0601ea9f27bdebdf4b",
"name": "Merry Christmas RUs Chasers",
"description": "",
"modified": "2023-12-06T15:06:45.654000",
"created": "2023-12-06T15:06:45.654000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1727,
"CVE": 1,
"domain": 1477,
"URL": 4663,
"hostname": 1110
},
"indicator_count": 8978,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708d3fec7eeee20ce02403",
"name": "www.access.service.gov.uk - http mal apple .crl fake godaddy asn and execution via chronme log file - total carnage",
"description": "",
"modified": "2023-12-06T15:03:27.390000",
"created": "2023-12-06T15:03:27.390000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 2,
"FileHash-SHA256": 1374,
"hostname": 792,
"domain": 517,
"URL": 1529,
"FileHash-MD5": 81,
"FileHash-SHA1": 71
},
"indicator_count": 4366,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708cf911f044ba6f739580",
"name": "Infections start here 91.195.240.226-as47846- SEDO-DE - aid www.bbb.org",
"description": "",
"modified": "2023-12-06T15:02:16.933000",
"created": "2023-12-06T15:02:16.933000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 610,
"URL": 1279,
"email": 2,
"hostname": 375,
"domain": 172,
"FileHash-MD5": 99,
"FileHash-SHA1": 81,
"CVE": 1
},
"indicator_count": 2619,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c4f41727d49d783b766",
"name": "RU KR .fill your boots -jaon file from vt graph 194.105.148.87",
"description": "",
"modified": "2023-12-06T14:59:27.563000",
"created": "2023-12-06T14:59:27.563000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 858,
"hostname": 589,
"URL": 2061,
"domain": 301
},
"indicator_count": 3809,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708a95ab15ef813f26cbb5",
"name": "New Data Wiper",
"description": "",
"modified": "2023-12-06T14:52:05.094000",
"created": "2023-12-06T14:52:05.094000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 151,
"domain": 34,
"URL": 363,
"hostname": 213,
"FileHash-MD5": 9,
"FileHash-SHA1": 4
},
"indicator_count": 774,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "657080e2831409d23c8d24a5",
"name": "iMessages.app 03.01.2022",
"description": "",
"modified": "2023-12-06T14:10:42.459000",
"created": "2023-12-06T14:10:42.459000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1768,
"hostname": 808,
"domain": 306,
"URL": 1937,
"FileHash-SHA1": 1
},
"indicator_count": 4820,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "657080c91dad41198eb749f7",
"name": "Hartintercivic.com",
"description": "",
"modified": "2023-12-06T14:10:17.112000",
"created": "2023-12-06T14:10:17.112000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1257,
"domain": 421,
"hostname": 1050,
"URL": 2321,
"FileHash-MD5": 1,
"FileHash-SHA1": 14
},
"indicator_count": 5064,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "6570804add74469eac78106c",
"name": "AngelPonce.com ~ Harris County Elections ADA Coordinator",
"description": "",
"modified": "2023-12-06T14:08:10.512000",
"created": "2023-12-06T14:08:10.512000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1148,
"domain": 286,
"hostname": 706,
"URL": 1406,
"email": 1,
"FileHash-SHA1": 5
},
"indicator_count": 3552,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707f3f51e635c843c1f5b9",
"name": "www.centergate.com",
"description": "",
"modified": "2023-12-06T14:03:43.279000",
"created": "2023-12-06T14:03:43.279000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 2,
"hostname": 949,
"FileHash-SHA256": 1386,
"URL": 2014,
"domain": 417,
"FileHash-MD5": 1,
"email": 1,
"FileHash-SHA1": 1
},
"indicator_count": 4771,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707f3a39d889e6d85ae6e0",
"name": "more of the same fake or compromised pages on websites",
"description": "",
"modified": "2023-12-06T14:03:38.459000",
"created": "2023-12-06T14:03:38.459000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 1,
"FileHash-SHA256": 381,
"domain": 237,
"URL": 1245,
"hostname": 539
},
"indicator_count": 2403,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707eab85e2a9a917487148",
"name": "Centergate.com",
"description": "",
"modified": "2023-12-06T14:01:15.794000",
"created": "2023-12-06T14:01:15.794000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 2,
"hostname": 810,
"FileHash-SHA256": 1327,
"URL": 2177,
"domain": 453,
"FileHash-MD5": 1,
"email": 1,
"FileHash-SHA1": 1
},
"indicator_count": 4772,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707e6989f665ba71d8b273",
"name": "bluetoothbotty like nothing you have seen hefore",
"description": "",
"modified": "2023-12-06T14:00:09.437000",
"created": "2023-12-06T14:00:09.437000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 1,
"hostname": 815,
"domain": 504,
"FileHash-SHA256": 4137,
"URL": 3590,
"FileHash-SHA1": 1
},
"indicator_count": 9048,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707dfb9f84eebbe3bdfe59",
"name": "Pegasus and Friends 2 - all touch by Pegasus or Variant in some way or another",
"description": "",
"modified": "2023-12-06T13:58:18.607000",
"created": "2023-12-06T13:58:18.607000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1207,
"domain": 312,
"hostname": 1198,
"URL": 3217,
"FileHash-MD5": 3
},
"indicator_count": 5937,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "6342b2b087554c9d5209b50b",
"name": "iphone",
"description": "",
"modified": "2022-11-09T00:03:32.403000",
"created": "2022-10-09T11:38:24.078000",
"tags": [],
"references": [
"iMessages.app"
],
"public": 1,
"adversary": "",
"targeted_countries": [
"United States of America"
],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": "622775d4f2c38a89fdd0128a",
"export_count": 6,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Lazzo115",
"id": "210949",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"domain": 306,
"URL": 1938,
"hostname": 808,
"FileHash-SHA256": 1768,
"FileHash-SHA1": 1
},
"indicator_count": 4821,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 8,
"modified_text": "1257 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62c035df9d1c1df8ca3fcaea",
"name": "a whole bunch of hell effected by the recent mozilla/firefox vulns",
"description": "",
"modified": "2022-08-01T00:01:42.977000",
"created": "2022-07-02T12:11:11.592000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 7,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 825,
"FileHash-SHA256": 2141,
"domain": 308,
"URL": 2036
},
"indicator_count": 5310,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 396,
"modified_text": "1357 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62bb7b6820f1de44d02cdc75",
"name": "eset.rosconnect.ru -VT Graph JSON upload",
"description": "",
"modified": "2022-07-28T00:02:14.384000",
"created": "2022-06-28T22:06:32.059000",
"tags": [
"https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332a",
"CVE-2017-11882"
],
"references": [
"CVE-2017-11882",
"https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332ac7139ae27294bc4bc2ba9728cdd62917f9"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 1,
"URL": 535,
"hostname": 128,
"FileHash-SHA256": 236,
"domain": 197
},
"indicator_count": 1097,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 392,
"modified_text": "1361 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62bb08310a8957d97aa23c30",
"name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances",
"description": "",
"modified": "2022-07-28T00:02:14.384000",
"created": "2022-06-28T13:54:57.927000",
"tags": [
"entity",
"ubotbrowser",
"20.99.132.105",
"minecraft"
],
"references": [
"https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 4,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 502,
"URL": 1437,
"domain": 110,
"FileHash-SHA256": 812
},
"indicator_count": 2861,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 398,
"modified_text": "1361 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62a3caaca484317351c448ba",
"name": "JavaAppletPlugin.plugin.zip..... Downloaded from Oracle Website",
"description": "JAVA??? \n\nThe full text of the text below: \u00c2\u00a31.3bn, 1.8bn euros, 2.4bn pence, or \u00a32.2bn llyb.",
"modified": "2022-07-10T00:00:39.429000",
"created": "2022-06-10T22:50:20.127000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [
{
"id": "W32/BotNet.K",
"display_name": "W32/BotNet.K",
"target": null
},
{
"id": "AVG Win32:Agent-ADAU [Trj]",
"display_name": "AVG Win32:Agent-ADAU [Trj]",
"target": null
},
{
"id": "malicious.2a7bf4",
"display_name": "malicious.2a7bf4",
"target": null
},
{
"id": "AI:FileInfector.A44F3C4816",
"display_name": "AI:FileInfector.A44F3C4816",
"target": null
},
{
"id": "W32/Botgor.A",
"display_name": "W32/Botgor.A",
"target": null
},
{
"id": "Trojan.Malware.121218.susgen",
"display_name": "Trojan.Malware.121218.susgen",
"target": null
},
{
"id": "Static AI - Malicious PE",
"display_name": "Static AI - Malicious PE",
"target": null
},
{
"id": "Worm.Win32.Burn.a",
"display_name": "Worm.Win32.Burn.a",
"target": null
},
{
"id": "BKDR_BOTGOR.SML",
"display_name": "BKDR_BOTGOR.SML",
"target": null
},
{
"id": "Win32.Backdoor.Agent.A",
"display_name": "Win32.Backdoor.Agent.A",
"target": null
},
{
"id": "BScope.Backdoor.Botgor",
"display_name": "BScope.Backdoor.Botgor",
"target": null
},
{
"id": "Worm/Win32.Burn.R34863",
"display_name": "Worm/Win32.Burn.R34863",
"target": null
},
{
"id": "Backdoor:Win32/Botgor.B",
"display_name": "Backdoor:Win32/Botgor.B",
"target": "/malware/Backdoor:Win32/Botgor.B"
},
{
"id": "Backdoor.Win32.Agent.ka!s1",
"display_name": "Backdoor.Win32.Agent.ka!s1",
"target": null
},
{
"id": "BDS/Agent.qva",
"display_name": "BDS/Agent.qva",
"target": null
},
{
"id": "Backdoor/Agent.bfic",
"display_name": "Backdoor/Agent.bfic",
"target": null
},
{
"id": "Win32.Trojan.Botgor.A",
"display_name": "Win32.Trojan.Botgor.A",
"target": null
},
{
"id": "Win32.ProcessHijack",
"display_name": "Win32.ProcessHijack",
"target": null
},
{
"id": "BackDoor.Siggen.46270",
"display_name": "BackDoor.Siggen.46270",
"target": null
},
{
"id": "Backdoor.Win32.Agent.~APQ@4ud5h",
"display_name": "Backdoor.Win32.Agent.~APQ@4ud5h",
"target": null
},
{
"id": "Virus.Botgor!1.D115 (CLASSIC)",
"display_name": "Virus.Botgor!1.D115 (CLASSIC)",
"target": null
},
{
"id": "Backdoor.Win32.Agent.117760.B",
"display_name": "Backdoor.Win32.Agent.117760.B",
"target": null
},
{
"id": "Worm:Win32/Botgor.18ddf561",
"display_name": "Worm:Win32/Botgor.18ddf561",
"target": "/malware/Worm:Win32/Botgor.18ddf561"
},
{
"id": "Worm.Win32.Burn.b",
"display_name": "Worm.Win32.Burn.b",
"target": null
},
{
"id": "Win.Malware.Botgor-9853222-0",
"display_name": "Win.Malware.Botgor-9853222-0",
"target": null
},
{
"id": "generic.ml",
"display_name": "generic.ml",
"target": null
},
{
"id": "ML.Attribute.HighConfidence",
"display_name": "ML.Attribute.HighConfidence",
"target": null
},
{
"id": "W32/Backdoor.UQUT-0945",
"display_name": "W32/Backdoor.UQUT-0945",
"target": null
},
{
"id": "win/malicious_confidence_100% (W)",
"display_name": "win/malicious_confidence_100% (W)",
"target": null
},
{
"id": "Trojan ( 000569271 )",
"display_name": "Trojan ( 000569271 )",
"target": null
},
{
"id": "Worm.Win32.Burn.tnPX",
"display_name": "Worm.Win32.Burn.tnPX",
"target": null
},
{
"id": "W32.AIDetect.malware2",
"display_name": "W32.AIDetect.malware2",
"target": null
}
],
"attack_ids": [
{
"id": "T1140",
"name": "Deobfuscate/Decode Files or Information",
"display_name": "T1140 - Deobfuscate/Decode Files or Information"
}
],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 4,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "MarceeS26",
"id": "133143",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 1382,
"hostname": 314,
"FileHash-SHA256": 1009,
"domain": 46,
"FileHash-MD5": 163,
"FileHash-SHA1": 612
},
"indicator_count": 3526,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 73,
"modified_text": "1379 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62802e2a51e813c6db82758f",
"name": "Merry Christmas RUs Chasers",
"description": "",
"modified": "2022-06-13T00:00:32.864000",
"created": "2022-05-14T22:33:14.346000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 10,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1727,
"hostname": 1110,
"URL": 4663,
"domain": 1477,
"CVE": 1
},
"indicator_count": 8978,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 396,
"modified_text": "1406 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62727ce7b14807e910b72bb7",
"name": "www.access.service.gov.uk - http mal apple .crl fake godaddy asn and execution via chronme log file - total carnage",
"description": "and that 72 ip at edgcast thats listed as false positive....\n\ud83e\udee2\ud83e\udd2f\ud83e\udd2c everything communucating with it is MALICIOUS and font and lang file corruption means the www is causing it!!!",
"modified": "2022-06-03T00:01:00.120000",
"created": "2022-05-04T13:17:27.444000",
"tags": [],
"references": [
"https://hybrid-analysis.com/sample/fcf01007f38956f164a86deda652684fe6c76c41db32f5ac38a43712615154dc/6271a3fc12c9eb6e7053caf1"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [
{
"id": "T1012",
"name": "Query Registry",
"display_name": "T1012 - Query Registry"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 12,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 1529,
"hostname": 792,
"domain": 517,
"FileHash-SHA256": 1374,
"CVE": 2,
"FileHash-MD5": 81,
"FileHash-SHA1": 71
},
"indicator_count": 4366,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 397,
"modified_text": "1416 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "626c6f418117c4b20d0706e3",
"name": "Infections start here 91.195.240.226-as47846- SEDO-DE - aid www.bbb.org",
"description": "",
"modified": "2022-05-29T00:01:17.829000",
"created": "2022-04-29T23:05:37.269000",
"tags": [
"91.195.240.226",
"domain parks",
"sedo",
"chained malware",
".rel XML",
"2013"
],
"references": [
"https://hybrid-analysis.com/sample/bb17013c1d9f8e01d55b92a7cefaf20372d1c2a3483ed1d00cce091a2d30cea9/5f97708faf83fa51aa3b74de",
"https://hybrid-analysis.com/sample/d6f4e7d29e7b460e67eb5eead3e07ace89682cb8f6c5c62172ec3f46b91f88c6/60e75be8ffad6735563f1a72"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [
{
"id": "T1043",
"name": "Commonly Used Port",
"display_name": "T1043 - Commonly Used Port"
},
{
"id": "T1179",
"name": "Hooking",
"display_name": "T1179 - Hooking"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 5,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 1279,
"FileHash-SHA256": 610,
"domain": 172,
"hostname": 375,
"CVE": 1,
"FileHash-MD5": 99,
"FileHash-SHA1": 81,
"email": 2
},
"indicator_count": 2619,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 397,
"modified_text": "1421 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "6265af4c6414d087b17443cc",
"name": "google gmail account login source code for UK teenage account",
"description": "",
"modified": "2022-05-25T00:04:03.622000",
"created": "2022-04-24T20:13:00.304000",
"tags": [],
"references": [
"