{ "type": "URL", "indicator": "https://version-api.hh-infra.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://version-api.hh-infra.com", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3447982679, "indicator": "https://version-api.hh-infra.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 8, "pulses": [ { "id": "657090132deb7fd89b09d555", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2023-12-06T15:15:31.177000", "created": "2023-12-06T15:15:31.177000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "domain": 308, "URL": 2036, "FileHash-SHA256": 2141 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708fdef7d4b5483117bb67", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2023-12-06T15:14:38.824000", "created": "2023-12-06T15:14:38.824000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 812, "domain": 110, "hostname": 502, "URL": 1437 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708e0601ea9f27bdebdf4b", "name": "Merry Christmas RUs Chasers", "description": "", "modified": "2023-12-06T15:06:45.654000", "created": "2023-12-06T15:06:45.654000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1727, "CVE": 1, "domain": 1477, "URL": 4663, "hostname": 1110 }, "indicator_count": 8978, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62c035df9d1c1df8ca3fcaea", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2022-08-01T00:01:42.977000", "created": "2022-07-02T12:11:11.592000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "FileHash-SHA256": 2141, "domain": 308, "URL": 2036 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1357 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb08310a8957d97aa23c30", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T13:54:57.927000", "tags": [ "entity", "ubotbrowser", "20.99.132.105", "minecraft" ], "references": [ "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 502, "URL": 1437, "domain": 110, "FileHash-SHA256": 812 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 398, "modified_text": "1361 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb7b6820f1de44d02cdc75", "name": "eset.rosconnect.ru -VT Graph JSON upload", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T22:06:32.059000", "tags": [ "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332a", "CVE-2017-11882" ], "references": [ "CVE-2017-11882", "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332ac7139ae27294bc4bc2ba9728cdd62917f9" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "URL": 535, "hostname": 128, "FileHash-SHA256": 236, "domain": 197 }, "indicator_count": 1097, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1361 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62a3caaca484317351c448ba", "name": "JavaAppletPlugin.plugin.zip..... Downloaded from Oracle Website", "description": "JAVA??? \n\nThe full text of the text below: \u00c2\u00a31.3bn, 1.8bn euros, 2.4bn pence, or \u00a32.2bn llyb.", "modified": "2022-07-10T00:00:39.429000", "created": "2022-06-10T22:50:20.127000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "W32/BotNet.K", "display_name": "W32/BotNet.K", "target": null }, { "id": "AVG Win32:Agent-ADAU [Trj]", "display_name": "AVG Win32:Agent-ADAU [Trj]", "target": null }, { "id": "malicious.2a7bf4", "display_name": "malicious.2a7bf4", "target": null }, { "id": "AI:FileInfector.A44F3C4816", "display_name": "AI:FileInfector.A44F3C4816", "target": null }, { "id": "W32/Botgor.A", "display_name": "W32/Botgor.A", "target": null }, { "id": "Trojan.Malware.121218.susgen", "display_name": "Trojan.Malware.121218.susgen", "target": null }, { "id": "Static AI - Malicious PE", "display_name": "Static AI - Malicious PE", "target": null }, { "id": "Worm.Win32.Burn.a", "display_name": "Worm.Win32.Burn.a", "target": null }, { "id": "BKDR_BOTGOR.SML", "display_name": "BKDR_BOTGOR.SML", "target": null }, { "id": "Win32.Backdoor.Agent.A", "display_name": "Win32.Backdoor.Agent.A", "target": null }, { "id": "BScope.Backdoor.Botgor", "display_name": "BScope.Backdoor.Botgor", "target": null }, { "id": "Worm/Win32.Burn.R34863", "display_name": "Worm/Win32.Burn.R34863", "target": null }, { "id": "Backdoor:Win32/Botgor.B", "display_name": "Backdoor:Win32/Botgor.B", "target": "/malware/Backdoor:Win32/Botgor.B" }, { "id": "Backdoor.Win32.Agent.ka!s1", "display_name": "Backdoor.Win32.Agent.ka!s1", "target": null }, { "id": "BDS/Agent.qva", "display_name": "BDS/Agent.qva", "target": null }, { "id": "Backdoor/Agent.bfic", "display_name": "Backdoor/Agent.bfic", "target": null }, { "id": "Win32.Trojan.Botgor.A", "display_name": "Win32.Trojan.Botgor.A", "target": null }, { "id": "Win32.ProcessHijack", "display_name": "Win32.ProcessHijack", "target": null }, { "id": "BackDoor.Siggen.46270", "display_name": "BackDoor.Siggen.46270", "target": null }, { "id": "Backdoor.Win32.Agent.~APQ@4ud5h", "display_name": "Backdoor.Win32.Agent.~APQ@4ud5h", "target": null }, { "id": "Virus.Botgor!1.D115 (CLASSIC)", "display_name": "Virus.Botgor!1.D115 (CLASSIC)", "target": null }, { "id": "Backdoor.Win32.Agent.117760.B", "display_name": "Backdoor.Win32.Agent.117760.B", "target": null }, { "id": "Worm:Win32/Botgor.18ddf561", "display_name": "Worm:Win32/Botgor.18ddf561", "target": "/malware/Worm:Win32/Botgor.18ddf561" }, { "id": "Worm.Win32.Burn.b", "display_name": "Worm.Win32.Burn.b", "target": null }, { "id": "Win.Malware.Botgor-9853222-0", "display_name": "Win.Malware.Botgor-9853222-0", "target": null }, { "id": "generic.ml", "display_name": "generic.ml", "target": null }, { "id": "ML.Attribute.HighConfidence", "display_name": "ML.Attribute.HighConfidence", "target": null }, { "id": "W32/Backdoor.UQUT-0945", "display_name": "W32/Backdoor.UQUT-0945", "target": null }, { "id": "win/malicious_confidence_100% (W)", "display_name": "win/malicious_confidence_100% (W)", "target": null }, { "id": "Trojan ( 000569271 )", "display_name": "Trojan ( 000569271 )", "target": null }, { "id": "Worm.Win32.Burn.tnPX", "display_name": "Worm.Win32.Burn.tnPX", "target": null }, { "id": "W32.AIDetect.malware2", "display_name": "W32.AIDetect.malware2", "target": null } ], "attack_ids": [ { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "MarceeS26", "id": "133143", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1382, "hostname": 314, "FileHash-SHA256": 1009, "domain": 46, "FileHash-MD5": 163, "FileHash-SHA1": 612 }, "indicator_count": 3526, "is_author": false, "is_subscribing": null, "subscriber_count": 73, "modified_text": "1379 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62802e2a51e813c6db82758f", "name": "Merry Christmas RUs Chasers", "description": "", "modified": "2022-06-13T00:00:32.864000", "created": "2022-05-14T22:33:14.346000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1727, "hostname": 1110, "URL": 4663, "domain": 1477, "CVE": 1 }, "indicator_count": 8978, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1406 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332ac7139ae27294bc4bc2ba9728cdd62917f9", "CVE-2017-11882", "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Worm.win32.burn.a", "Worm:win32/botgor.18ddf561", "Worm/win32.burn.r34863", "Bkdr_botgor.sml", "Ai:fileinfector.a44f3c4816", "W32/botgor.a", "Backdoor.win32.agent.117760.b", "W32/botnet.k", "Win32.backdoor.agent.a", "Bscope.backdoor.botgor", "Backdoor.win32.agent.~apq@4ud5h", "Trojan ( 000569271 )", "Backdoor.siggen.46270", "Backdoor/agent.bfic", "Win32.processhijack", "Static ai - malicious pe", "Virus.botgor!1.d115 (classic)", "Win/malicious_confidence_100% (w)", "W32/backdoor.uqut-0945", "Ml.attribute.highconfidence", "Avg win32:agent-adau [trj]", "Bds/agent.qva", "Backdoor:win32/botgor.b", "Generic.ml", "Trojan.malware.121218.susgen", "Backdoor.win32.agent.ka!s1", "Malicious.2a7bf4", "Win32.trojan.botgor.a", "Win.malware.botgor-9853222-0", "Worm.win32.burn.tnpx", "W32.aidetect.malware2", "Worm.win32.burn.b" ], "industries": [], "unique_indicators": 20736 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/hh-infra.com", "whois": "http://whois.domaintools.com/hh-infra.com", "domain": "hh-infra.com", "hostname": "version-api.hh-infra.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 8, "pulses": [ { "id": "657090132deb7fd89b09d555", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2023-12-06T15:15:31.177000", "created": "2023-12-06T15:15:31.177000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "domain": 308, "URL": 2036, "FileHash-SHA256": 2141 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708fdef7d4b5483117bb67", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2023-12-06T15:14:38.824000", "created": "2023-12-06T15:14:38.824000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 812, "domain": 110, "hostname": 502, "URL": 1437 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708e0601ea9f27bdebdf4b", "name": "Merry Christmas RUs Chasers", "description": "", "modified": "2023-12-06T15:06:45.654000", "created": "2023-12-06T15:06:45.654000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1727, "CVE": 1, "domain": 1477, "URL": 4663, "hostname": 1110 }, "indicator_count": 8978, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62c035df9d1c1df8ca3fcaea", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2022-08-01T00:01:42.977000", "created": "2022-07-02T12:11:11.592000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "FileHash-SHA256": 2141, "domain": 308, "URL": 2036 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1357 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb08310a8957d97aa23c30", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T13:54:57.927000", "tags": [ "entity", "ubotbrowser", "20.99.132.105", "minecraft" ], "references": [ "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 502, "URL": 1437, "domain": 110, "FileHash-SHA256": 812 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 398, "modified_text": "1361 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb7b6820f1de44d02cdc75", "name": "eset.rosconnect.ru -VT Graph JSON upload", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T22:06:32.059000", "tags": [ "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332a", "CVE-2017-11882" ], "references": [ "CVE-2017-11882", "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332ac7139ae27294bc4bc2ba9728cdd62917f9" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "URL": 535, "hostname": 128, "FileHash-SHA256": 236, "domain": 197 }, "indicator_count": 1097, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1361 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62a3caaca484317351c448ba", "name": "JavaAppletPlugin.plugin.zip..... Downloaded from Oracle Website", "description": "JAVA??? \n\nThe full text of the text below: \u00c2\u00a31.3bn, 1.8bn euros, 2.4bn pence, or \u00a32.2bn llyb.", "modified": "2022-07-10T00:00:39.429000", "created": "2022-06-10T22:50:20.127000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "W32/BotNet.K", "display_name": "W32/BotNet.K", "target": null }, { "id": "AVG Win32:Agent-ADAU [Trj]", "display_name": "AVG Win32:Agent-ADAU [Trj]", "target": null }, { "id": "malicious.2a7bf4", "display_name": "malicious.2a7bf4", "target": null }, { "id": "AI:FileInfector.A44F3C4816", "display_name": "AI:FileInfector.A44F3C4816", "target": null }, { "id": "W32/Botgor.A", "display_name": "W32/Botgor.A", "target": null }, { "id": "Trojan.Malware.121218.susgen", "display_name": "Trojan.Malware.121218.susgen", "target": null }, { "id": "Static AI - Malicious PE", "display_name": "Static AI - Malicious PE", "target": null }, { "id": "Worm.Win32.Burn.a", "display_name": "Worm.Win32.Burn.a", "target": null }, { "id": "BKDR_BOTGOR.SML", "display_name": "BKDR_BOTGOR.SML", "target": null }, { "id": "Win32.Backdoor.Agent.A", "display_name": "Win32.Backdoor.Agent.A", "target": null }, { "id": "BScope.Backdoor.Botgor", "display_name": "BScope.Backdoor.Botgor", "target": null }, { "id": "Worm/Win32.Burn.R34863", "display_name": "Worm/Win32.Burn.R34863", "target": null }, { "id": "Backdoor:Win32/Botgor.B", "display_name": "Backdoor:Win32/Botgor.B", "target": "/malware/Backdoor:Win32/Botgor.B" }, { "id": "Backdoor.Win32.Agent.ka!s1", "display_name": "Backdoor.Win32.Agent.ka!s1", "target": null }, { "id": "BDS/Agent.qva", "display_name": "BDS/Agent.qva", "target": null }, { "id": "Backdoor/Agent.bfic", "display_name": "Backdoor/Agent.bfic", "target": null }, { "id": "Win32.Trojan.Botgor.A", "display_name": "Win32.Trojan.Botgor.A", "target": null }, { "id": "Win32.ProcessHijack", "display_name": "Win32.ProcessHijack", "target": null }, { "id": "BackDoor.Siggen.46270", "display_name": "BackDoor.Siggen.46270", "target": null }, { "id": "Backdoor.Win32.Agent.~APQ@4ud5h", "display_name": "Backdoor.Win32.Agent.~APQ@4ud5h", "target": null }, { "id": "Virus.Botgor!1.D115 (CLASSIC)", "display_name": "Virus.Botgor!1.D115 (CLASSIC)", "target": null }, { "id": "Backdoor.Win32.Agent.117760.B", "display_name": "Backdoor.Win32.Agent.117760.B", "target": null }, { "id": "Worm:Win32/Botgor.18ddf561", "display_name": "Worm:Win32/Botgor.18ddf561", "target": "/malware/Worm:Win32/Botgor.18ddf561" }, { "id": "Worm.Win32.Burn.b", "display_name": "Worm.Win32.Burn.b", "target": null }, { "id": "Win.Malware.Botgor-9853222-0", "display_name": "Win.Malware.Botgor-9853222-0", "target": null }, { "id": "generic.ml", "display_name": "generic.ml", "target": null }, { "id": "ML.Attribute.HighConfidence", "display_name": "ML.Attribute.HighConfidence", "target": null }, { "id": "W32/Backdoor.UQUT-0945", "display_name": "W32/Backdoor.UQUT-0945", "target": null }, { "id": "win/malicious_confidence_100% (W)", "display_name": "win/malicious_confidence_100% (W)", "target": null }, { "id": "Trojan ( 000569271 )", "display_name": "Trojan ( 000569271 )", "target": null }, { "id": "Worm.Win32.Burn.tnPX", "display_name": "Worm.Win32.Burn.tnPX", "target": null }, { "id": "W32.AIDetect.malware2", "display_name": "W32.AIDetect.malware2", "target": null } ], "attack_ids": [ { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "MarceeS26", "id": "133143", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1382, "hostname": 314, "FileHash-SHA256": 1009, "domain": 46, "FileHash-MD5": 163, "FileHash-SHA1": 612 }, "indicator_count": 3526, "is_author": false, "is_subscribing": null, "subscriber_count": 73, "modified_text": "1379 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62802e2a51e813c6db82758f", "name": "Merry Christmas RUs Chasers", "description": "", "modified": "2022-06-13T00:00:32.864000", "created": "2022-05-14T22:33:14.346000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1727, "hostname": 1110, "URL": 4663, "domain": 1477, "CVE": 1 }, "indicator_count": 8978, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1406 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://version-api.hh-infra.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://version-api.hh-infra.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776629791.2597334 }