{ "type": "URL", "indicator": "https://micron.xxuz.com/css/fps.css", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://micron.xxuz.com/css/fps.css", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 2990272345, "indicator": "https://micron.xxuz.com/css/fps.css", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 43, "pulses": [ { "id": "609c1efba8300701e03c2784", "name": "Hello Ransomware Uses Updated China Chopper Web Shell and SharePoint Vulnerability", "description": "In January, Trend Micro encountered a new ransomware using .hello as its extension in one of the cases that possibly arrived via a SharePoint server vulnerability. This appeared to be a new ransomware family dubbed as the Hello ransomware (aka WickrMe), named after the chat application that was used to contact the cybercriminals responsible. Previous variants were observed using .hemming and .strike extensions and did not include the cybercriminals\u2019 WickrMe user handles. In contrast, newer versions of the ransom notes with .hello extensions now have the WickrMe contact information.", "modified": "2021-05-12T18:31:23.637000", "created": "2021-05-12T18:31:23.637000", "tags": [ "Hello Ransomware", "WickrMe", "Cobalt Strike", "CVE-2019-0604", "China Chopper" ], "references": [ "https://www.trendmicro.com/en_us/research/21/d/hello-ransomware-uses-updated-china-chopper-web-shell-sharepoint-vulnerability.html", "Hello-IOCs.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Hello Ransomware", "display_name": "Hello Ransomware", "target": null }, { "id": "WickrMe", "display_name": "WickrMe", "target": null }, { "id": "Cobalt Strike - S0154", "display_name": "Cobalt Strike - S0154", "target": null }, { "id": "Ransom.Win32.HIDDENTEARHAPPY", "display_name": "Ransom.Win32.HIDDENTEARHAPPY", "target": null }, { "id": "Ransom.MSIL.HELLO", "display_name": "Ransom.MSIL.HELLO", "target": null }, { "id": "HackTool.Win32.COBEACON", "display_name": "HackTool.Win32.COBEACON", "target": null }, { "id": "Trojan.PS1.COBEACON", "display_name": "Trojan.PS1.COBEACON", "target": null }, { "id": "China Chopper - S0020", "display_name": "China Chopper - S0020", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1213", "name": "Data from Information Repositories", "display_name": "T1213 - Data from Information Repositories" }, { "id": "T1486", "name": "Data Encrypted for Impact", "display_name": "T1486 - Data Encrypted for Impact" }, { "id": "T1490", "name": "Inhibit System Recovery", "display_name": "T1490 - Inhibit System Recovery" }, { "id": "T1505", "name": "Server Software Component", "display_name": "T1505 - Server Software Component" }, { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 275, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-MD5": 1, "FileHash-SHA256": 5, "FileHash-SHA1": 1, "URL": 4 }, "indicator_count": 12, "is_author": false, "is_subscribing": null, "subscriber_count": 377579, "modified_text": "1803 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "688d84dd329cefe36f3b06b2", "name": "InQuest - 01-08-2025", "description": "", "modified": "2025-09-01T03:01:43.765000", "created": "2025-08-02T03:24:13.908000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 37, "URL": 159, "FileHash-SHA256": 391, "domain": 50, "FileHash-MD5": 8, "FileHash-SHA1": 2 }, "indicator_count": 647, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "230 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "685de9230bc4263809682156", "name": "InQuest - 26-06-2025", "description": "", "modified": "2025-07-27T00:03:18.883000", "created": "2025-06-27T00:43:15.404000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 42, "URL": 251, "FileHash-SHA256": 229, "domain": 46, "FileHash-SHA1": 13 }, "indicator_count": 581, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "266 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "685c96874b2a2efbd4001fde", "name": "InQuest - 25-06-2025", "description": "", "modified": "2025-07-26T00:02:57.427000", "created": "2025-06-26T00:38:31.953000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 205, "domain": 40, "hostname": 29, "FileHash-SHA256": 183, "FileHash-SHA1": 12 }, "indicator_count": 469, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "267 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68364f9315af13298f12ee0c", "name": "InQuest - 27-05-2025", "description": "", "modified": "2025-06-26T23:04:46.238000", "created": "2025-05-27T23:49:39.781000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 38, "URL": 189, "domain": 56, "FileHash-SHA256": 403, "FileHash-SHA1": 19, "FileHash-MD5": 6 }, "indicator_count": 711, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "297 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "682e68a1bc32fdebbbef1623", "name": "InQuest - 21-05-2025", "description": "", "modified": "2025-06-20T23:02:09.595000", "created": "2025-05-21T23:58:25.183000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 35, "URL": 181, "FileHash-SHA1": 16, "FileHash-MD5": 11, "FileHash-SHA256": 350, "hostname": 56 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "303 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "680976c5c54051cd27313fcc", "name": "InQuest - 23-04-2025", "description": "", "modified": "2025-05-23T23:03:39.686000", "created": "2025-04-23T23:24:53.686000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 12, "URL": 441, "hostname": 70, "FileHash-SHA256": 453, "domain": 110, "FileHash-MD5": 56 }, "indicator_count": 1142, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "331 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "680826f228b58307348f3fc9", "name": "InQuest - 22-04-2025", "description": "", "modified": "2025-05-22T23:05:54.556000", "created": "2025-04-22T23:32:02.325000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 12, "URL": 441, "hostname": 70, "FileHash-SHA256": 453, "domain": 110, "FileHash-MD5": 56 }, "indicator_count": 1142, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "332 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6806d5ccd36404827e0c52c5", "name": "InQuest - 21-04-2025", "description": "", "modified": "2025-05-21T23:02:21.162000", "created": "2025-04-21T23:33:32.814000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "URL": 395, "hostname": 75, "FileHash-SHA256": 504, "domain": 101, "FileHash-MD5": 61 }, "indicator_count": 1152, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "333 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "680583e4949d837b1ac2108d", "name": "InQuest - 20-04-2025", "description": "", "modified": "2025-05-20T23:03:20.084000", "created": "2025-04-20T23:31:48.943000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 388, "FileHash-SHA1": 19, "FileHash-SHA256": 539, "hostname": 73, "FileHash-MD5": 59, "domain": 94 }, "indicator_count": 1172, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "334 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6804338b912660361861d33d", "name": "InQuest - 19-04-2025", "description": "", "modified": "2025-05-19T23:00:01.837000", "created": "2025-04-19T23:36:43.305000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 407, "FileHash-SHA1": 18, "FileHash-SHA256": 520, "FileHash-MD5": 21, "domain": 105, "hostname": 69 }, "indicator_count": 1140, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "335 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f855b49fe2aa5450f5d2e7", "name": "InQuest - 10-04-2025", "description": "", "modified": "2025-05-10T23:02:11.501000", "created": "2025-04-10T23:35:16.302000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 117, "URL": 540, "FileHash-SHA256": 838, "FileHash-SHA1": 26, "hostname": 139, "FileHash-MD5": 52 }, "indicator_count": 1712, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "344 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f70374d85f9762c3ad56c2", "name": "InQuest - 09-04-2025", "description": "", "modified": "2025-05-09T23:08:55.551000", "created": "2025-04-09T23:32:04.566000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 57, "domain": 142, "URL": 529, "FileHash-SHA256": 826, "hostname": 120, "FileHash-SHA1": 23 }, "indicator_count": 1697, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "345 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f5b0da593113fca17f4f10", "name": "InQuest - 08-04-2025", "description": "", "modified": "2025-05-08T23:02:05.353000", "created": "2025-04-08T23:27:22.966000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 25, "domain": 149, "URL": 543, "hostname": 113, "FileHash-SHA256": 666, "FileHash-MD5": 55 }, "indicator_count": 1551, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "346 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ec7711f7a51c5541374383", "name": "InQuest - 01-04-2025", "description": "", "modified": "2025-05-01T23:02:01.501000", "created": "2025-04-01T23:30:25.776000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 458, "FileHash-SHA1": 28, "FileHash-MD5": 7, "FileHash-SHA256": 387, "domain": 107, "hostname": 105 }, "indicator_count": 1092, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "353 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67eb25b0b86f4fa864aab104", "name": "InQuest - 31-03-2025", "description": "", "modified": "2025-04-30T23:03:40.572000", "created": "2025-03-31T23:30:56.816000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 506, "FileHash-SHA1": 23, "FileHash-SHA256": 393, "hostname": 95, "domain": 94, "FileHash-MD5": 46 }, "indicator_count": 1157, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "354 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67e88f54f324b4b2336dbfc1", "name": "InQuest - 29-03-2025", "description": "", "modified": "2025-04-29T00:02:51.658000", "created": "2025-03-30T00:24:52.600000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 20, "URL": 649, "hostname": 125, "FileHash-SHA256": 405, "domain": 105, "FileHash-MD5": 53 }, "indicator_count": 1357, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "355 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67e73f39f3f9b5aaf7918724", "name": "InQuest - 28-03-2025", "description": "", "modified": "2025-04-28T00:01:01.038000", "created": "2025-03-29T00:30:49.966000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 31, "URL": 592, "hostname": 130, "FileHash-SHA256": 578, "domain": 131, "FileHash-MD5": 13 }, "indicator_count": 1475, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "356 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67e6d3f69a32769fed5913e4", "name": "InQuest - 27-03-2025", "description": "", "modified": "2025-04-27T16:02:05.584000", "created": "2025-03-28T16:53:10.483000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 31, "URL": 592, "hostname": 130, "FileHash-SHA256": 578, "domain": 131, "FileHash-MD5": 13 }, "indicator_count": 1475, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "357 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67c795e6dbe0a0abe1e293bb", "name": "InQuest - 04-03-2025", "description": "", "modified": "2025-04-04T00:05:03.187000", "created": "2025-03-05T00:08:06.885000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 717, "FileHash-SHA256": 957, "FileHash-SHA1": 79, "FileHash-MD5": 164, "domain": 171, "hostname": 181 }, "indicator_count": 2269, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "380 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67c644bfc6874248340964fc", "name": "InQuest - 03-03-2025", "description": "", "modified": "2025-04-03T00:02:36.001000", "created": "2025-03-04T00:09:35.689000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 723, "FileHash-SHA256": 972, "hostname": 186, "domain": 190, "FileHash-MD5": 164, "FileHash-SHA1": 79 }, "indicator_count": 2314, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "381 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67c4f2f08cb8438b14cad7a6", "name": "InQuest - 02-03-2025", "description": "", "modified": "2025-04-02T00:04:46.454000", "created": "2025-03-03T00:08:16.763000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 972, "hostname": 186, "URL": 719, "domain": 190, "FileHash-MD5": 164, "FileHash-SHA1": 79 }, "indicator_count": 2310, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "382 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67c3a1a2f87a915b336cb063", "name": "InQuest - 01-03-2025", "description": "", "modified": "2025-04-01T00:03:06.013000", "created": "2025-03-02T00:09:06.255000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 972, "hostname": 186, "URL": 719, "domain": 190, "FileHash-MD5": 164, "FileHash-SHA1": 79 }, "indicator_count": 2310, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "383 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67b27deec91c946e9675e7fa", "name": "InQuest - 16-02-2025", "description": "", "modified": "2025-03-19T00:03:04.847000", "created": "2025-02-17T00:08:14.062000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "396 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67b12c3c4632a0d8c2aa4404", "name": "InQuest - 15-02-2025", "description": "", "modified": "2025-03-18T00:02:17.088000", "created": "2025-02-16T00:07:24.725000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "397 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67afdaf25d973df1506db9ed", "name": "InQuest - 14-02-2025", "description": "", "modified": "2025-03-17T00:02:40.155000", "created": "2025-02-15T00:08:18.304000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "398 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ae8977777bce12d0bdefb8", "name": "InQuest - 13-02-2025", "description": "", "modified": "2025-03-16T00:02:02.909000", "created": "2025-02-14T00:08:23.844000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "URL": 435, "hostname": 110, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "399 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ad37ac07b803850cd5019d", "name": "InQuest - 12-02-2025", "description": "", "modified": "2025-03-15T00:02:35.409000", "created": "2025-02-13T00:07:08.824000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "URL": 435, "hostname": 110, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "400 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67abe6989c669db0193ae9db", "name": "InQuest - 11-02-2025", "description": "", "modified": "2025-03-14T00:03:58.923000", "created": "2025-02-12T00:08:56.544000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1150, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1829, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "401 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ab03f304b42508f38e1888", "name": "InQuest - 10-02-2025", "description": "", "modified": "2025-03-13T08:02:58.413000", "created": "2025-02-11T08:01:55.601000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 442, "hostname": 110, "FileHash-SHA256": 874, "FileHash-MD5": 21, "FileHash-SHA1": 24, "domain": 91 }, "indicator_count": 1562, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "402 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "677487c1b8986109eaf04bab", "name": "InQuest - 31-12-2024", "description": "", "modified": "2025-01-31T00:03:05.579000", "created": "2025-01-01T00:09:37.391000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 624, "FileHash-SHA256": 653, "hostname": 95, "domain": 158, "FileHash-SHA1": 22, "FileHash-MD5": 67 }, "indicator_count": 1619, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "443 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67733763e2dcce4b15468132", "name": "InQuest - 30-12-2024", "description": "", "modified": "2025-01-30T00:00:18.927000", "created": "2024-12-31T00:14:27.442000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 20, "URL": 579, "FileHash-SHA256": 719, "domain": 131, "hostname": 88, "FileHash-MD5": 27 }, "indicator_count": 1564, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "444 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675f6f12b0263311019e2661", "name": "InQuest - 15-12-2024", "description": "", "modified": "2025-01-15T00:02:57.863000", "created": "2024-12-16T00:06:42.731000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 510, "FileHash-SHA256": 793, "FileHash-SHA1": 40, "domain": 141, "hostname": 103, "FileHash-MD5": 21 }, "indicator_count": 1608, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "459 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675e1ddc079e37e0572a0ec5", "name": "InQuest - 14-12-2024", "description": "", "modified": "2025-01-14T00:02:58.431000", "created": "2024-12-15T00:07:56.726000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 561, "FileHash-SHA256": 894, "domain": 143, "hostname": 117, "FileHash-MD5": 25, "FileHash-SHA1": 39 }, "indicator_count": 1779, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "460 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675ccc5c1ce05c14d502d25b", "name": "InQuest - 13-12-2024", "description": "", "modified": "2025-01-13T00:04:50.992000", "created": "2024-12-14T00:07:56.101000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 543, "FileHash-SHA256": 876, "FileHash-SHA1": 27, "domain": 160, "hostname": 90, "FileHash-MD5": 25 }, "indicator_count": 1721, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "461 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675b7a8d715bea8dae799800", "name": "InQuest - 12-12-2024", "description": "", "modified": "2025-01-12T00:06:37.933000", "created": "2024-12-13T00:06:37.316000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 528, "FileHash-SHA256": 884, "FileHash-MD5": 23, "FileHash-SHA1": 26, "domain": 174, "hostname": 85 }, "indicator_count": 1720, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "462 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675a291c4db55758a6c9939f", "name": "InQuest - 11-12-2024", "description": "", "modified": "2025-01-11T00:05:21.483000", "created": "2024-12-12T00:06:52.807000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 486, "FileHash-SHA256": 791, "domain": 169, "hostname": 73, "FileHash-SHA1": 25, "FileHash-MD5": 22 }, "indicator_count": 1566, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "463 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6758d6b537b2a55149ef62d8", "name": "InQuest - 10-12-2024", "description": "", "modified": "2025-01-10T00:01:00.333000", "created": "2024-12-11T00:03:01.699000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 477, "FileHash-SHA256": 774, "FileHash-SHA1": 25, "domain": 170, "hostname": 92, "FileHash-MD5": 22 }, "indicator_count": 1560, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "464 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "66d8e809f5f21591e5ff8aa9", "name": "InQuest - 04-09-2024", "description": "", "modified": "2024-10-04T23:01:13.782000", "created": "2024-09-04T23:06:49.702000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 702, "FileHash-SHA1": 20, "hostname": 125, "domain": 197, "FileHash-SHA256": 873, "FileHash-MD5": 7 }, "indicator_count": 1924, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "562 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "66d250b5dcf88c775f929828", "name": "InQuest - 30-08-2024", "description": "", "modified": "2024-09-29T23:03:12.335000", "created": "2024-08-30T23:07:33.575000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 716, "FileHash-SHA256": 890, "hostname": 133, "FileHash-SHA1": 18, "domain": 197, "FileHash-MD5": 7 }, "indicator_count": 1961, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "567 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "660f33e3d5f8fdcadff44135", "name": "InQuest - 04-04-2024", "description": "", "modified": "2024-05-04T23:00:18.200000", "created": "2024-04-04T23:12:35.832000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 824, "domain": 166, "URL": 761, "FileHash-MD5": 47, "hostname": 141, "FileHash-SHA1": 36 }, "indicator_count": 1975, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "715 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65f0eecbd56b99f31c45cf45", "name": "InQuest - 12-03-2024", "description": "", "modified": "2024-04-12T00:03:45.379000", "created": "2024-03-13T00:09:47.889000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 685, "hostname": 109, "FileHash-SHA256": 476, "FileHash-SHA1": 31, "domain": 142, "FileHash-MD5": 114 }, "indicator_count": 1557, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "737 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65e908574f3c7e97f980304b", "name": "InQuest - 06-03-2024", "description": "", "modified": "2024-04-06T00:05:19.883000", "created": "2024-03-07T00:20:39.986000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 34, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 951, "FileHash-SHA1": 45, "FileHash-MD5": 67, "hostname": 157, "FileHash-SHA256": 961, "domain": 236 }, "indicator_count": 2417, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "743 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://labs.inquest.net/iocdb", "https://www.trendmicro.com/en_us/research/21/d/hello-ransomware-uses-updated-china-chopper-web-shell-sharepoint-vulnerability.html", "Hello-IOCs.txt" ], "related": { "alienvault": { "adversary": [], "malware_families": [ "Trojan.ps1.cobeacon", "Ransom.msil.hello", "Cobalt strike - s0154", "Wickrme", "Hello ransomware", "China chopper - s0020", "Ransom.win32.hiddentearhappy", "Hacktool.win32.cobeacon" ], "industries": [], "unique_indicators": 12 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 8966 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/xxuz.com", "whois": "http://whois.domaintools.com/xxuz.com", "domain": "xxuz.com", "hostname": "micron.xxuz.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 43, "pulses": [ { "id": "609c1efba8300701e03c2784", "name": "Hello Ransomware Uses Updated China Chopper Web Shell and SharePoint Vulnerability", "description": "In January, Trend Micro encountered a new ransomware using .hello as its extension in one of the cases that possibly arrived via a SharePoint server vulnerability. This appeared to be a new ransomware family dubbed as the Hello ransomware (aka WickrMe), named after the chat application that was used to contact the cybercriminals responsible. Previous variants were observed using .hemming and .strike extensions and did not include the cybercriminals\u2019 WickrMe user handles. In contrast, newer versions of the ransom notes with .hello extensions now have the WickrMe contact information.", "modified": "2021-05-12T18:31:23.637000", "created": "2021-05-12T18:31:23.637000", "tags": [ "Hello Ransomware", "WickrMe", "Cobalt Strike", "CVE-2019-0604", "China Chopper" ], "references": [ "https://www.trendmicro.com/en_us/research/21/d/hello-ransomware-uses-updated-china-chopper-web-shell-sharepoint-vulnerability.html", "Hello-IOCs.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Hello Ransomware", "display_name": "Hello Ransomware", "target": null }, { "id": "WickrMe", "display_name": "WickrMe", "target": null }, { "id": "Cobalt Strike - S0154", "display_name": "Cobalt Strike - S0154", "target": null }, { "id": "Ransom.Win32.HIDDENTEARHAPPY", "display_name": "Ransom.Win32.HIDDENTEARHAPPY", "target": null }, { "id": "Ransom.MSIL.HELLO", "display_name": "Ransom.MSIL.HELLO", "target": null }, { "id": "HackTool.Win32.COBEACON", "display_name": "HackTool.Win32.COBEACON", "target": null }, { "id": "Trojan.PS1.COBEACON", "display_name": "Trojan.PS1.COBEACON", "target": null }, { "id": "China Chopper - S0020", "display_name": "China Chopper - S0020", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1213", "name": "Data from Information Repositories", "display_name": "T1213 - Data from Information Repositories" }, { "id": "T1486", "name": "Data Encrypted for Impact", "display_name": "T1486 - Data Encrypted for Impact" }, { "id": "T1490", "name": "Inhibit System Recovery", "display_name": "T1490 - Inhibit System Recovery" }, { "id": "T1505", "name": "Server Software Component", "display_name": "T1505 - Server Software Component" }, { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 275, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-MD5": 1, "FileHash-SHA256": 5, "FileHash-SHA1": 1, "URL": 4 }, "indicator_count": 12, "is_author": false, "is_subscribing": null, "subscriber_count": 377579, "modified_text": "1803 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "688d84dd329cefe36f3b06b2", "name": "InQuest - 01-08-2025", "description": "", "modified": "2025-09-01T03:01:43.765000", "created": "2025-08-02T03:24:13.908000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 37, "URL": 159, "FileHash-SHA256": 391, "domain": 50, "FileHash-MD5": 8, "FileHash-SHA1": 2 }, "indicator_count": 647, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "230 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "685de9230bc4263809682156", "name": "InQuest - 26-06-2025", "description": "", "modified": "2025-07-27T00:03:18.883000", "created": "2025-06-27T00:43:15.404000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 42, "URL": 251, "FileHash-SHA256": 229, "domain": 46, "FileHash-SHA1": 13 }, "indicator_count": 581, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "266 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "685c96874b2a2efbd4001fde", "name": "InQuest - 25-06-2025", "description": "", "modified": "2025-07-26T00:02:57.427000", "created": "2025-06-26T00:38:31.953000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 205, "domain": 40, "hostname": 29, "FileHash-SHA256": 183, "FileHash-SHA1": 12 }, "indicator_count": 469, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "267 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68364f9315af13298f12ee0c", "name": "InQuest - 27-05-2025", "description": "", "modified": "2025-06-26T23:04:46.238000", "created": "2025-05-27T23:49:39.781000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 38, "URL": 189, "domain": 56, "FileHash-SHA256": 403, "FileHash-SHA1": 19, "FileHash-MD5": 6 }, "indicator_count": 711, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "297 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "682e68a1bc32fdebbbef1623", "name": "InQuest - 21-05-2025", "description": "", "modified": "2025-06-20T23:02:09.595000", "created": "2025-05-21T23:58:25.183000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 35, "URL": 181, "FileHash-SHA1": 16, "FileHash-MD5": 11, "FileHash-SHA256": 350, "hostname": 56 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "303 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "680976c5c54051cd27313fcc", "name": "InQuest - 23-04-2025", "description": "", "modified": "2025-05-23T23:03:39.686000", "created": "2025-04-23T23:24:53.686000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 12, "URL": 441, "hostname": 70, "FileHash-SHA256": 453, "domain": 110, "FileHash-MD5": 56 }, "indicator_count": 1142, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "331 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "680826f228b58307348f3fc9", "name": "InQuest - 22-04-2025", "description": "", "modified": "2025-05-22T23:05:54.556000", "created": "2025-04-22T23:32:02.325000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 12, "URL": 441, "hostname": 70, "FileHash-SHA256": 453, "domain": 110, "FileHash-MD5": 56 }, "indicator_count": 1142, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "332 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6806d5ccd36404827e0c52c5", "name": "InQuest - 21-04-2025", "description": "", "modified": "2025-05-21T23:02:21.162000", "created": "2025-04-21T23:33:32.814000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "URL": 395, "hostname": 75, "FileHash-SHA256": 504, "domain": 101, "FileHash-MD5": 61 }, "indicator_count": 1152, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "333 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "680583e4949d837b1ac2108d", "name": "InQuest - 20-04-2025", "description": "", "modified": "2025-05-20T23:03:20.084000", "created": "2025-04-20T23:31:48.943000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 388, "FileHash-SHA1": 19, "FileHash-SHA256": 539, "hostname": 73, "FileHash-MD5": 59, "domain": 94 }, "indicator_count": 1172, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "334 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://micron.xxuz.com/css/fps.css", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://micron.xxuz.com/css/fps.css", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776642198.9574745 }