{ "type": "URL", "indicator": "https://www.listisima.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://www.listisima.com", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3491496486, "indicator": "https://www.listisima.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 18, "pulses": [ { "id": "6570913a03b8f1cdc6abe32e", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2023-12-06T15:20:26.615000", "created": "2023-12-06T15:20:26.615000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 546, "domain": 162, "URL": 1042, "hostname": 282, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570912e693a2db20f91f6db", "name": "AMDTAs .bin file related to driverpack", "description": "", "modified": "2023-12-06T15:20:14.162000", "created": "2023-12-06T15:20:14.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 322, "FileHash-MD5": 69, "FileHash-SHA1": 69, "URL": 32, "hostname": 22, "domain": 21 }, "indicator_count": 535, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570911c48bd2a6a147f53a2", "name": "MAC MAC", "description": "", "modified": "2023-12-06T15:19:56.535000", "created": "2023-12-06T15:19:56.535000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1193, "FileHash-MD5": 722, "FileHash-SHA1": 726, "hostname": 76, "URL": 40, "domain": 103 }, "indicator_count": 2860, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090fe5e8c659c7e5cb094", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "", "modified": "2023-12-06T15:19:26.152000", "created": "2023-12-06T15:19:26.152000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090e5dc9b2e91369b6c56", "name": "bunch of KR muck", "description": "", "modified": "2023-12-06T15:19:01.428000", "created": "2023-12-06T15:19:01.428000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "hostname": 227, "domain": 101, "URL": 496 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570909ce647711cd92a0dfe", "name": "KSH; Unix Executable File. MacBook Pro (13-inch, 2019)", "description": "", "modified": "2023-12-06T15:17:48.722000", "created": "2023-12-06T15:17:48.722000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1193, "FileHash-MD5": 722, "FileHash-SHA1": 726, "hostname": 76, "URL": 40, "domain": 103 }, "indicator_count": 2860, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090132deb7fd89b09d555", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2023-12-06T15:15:31.177000", "created": "2023-12-06T15:15:31.177000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "domain": 308, "URL": 2036, "FileHash-SHA256": 2141 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708fdef7d4b5483117bb67", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2023-12-06T15:14:38.824000", "created": "2023-12-06T15:14:38.824000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 812, "domain": 110, "hostname": 502, "URL": 1437 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f2cd9eb0a80cca60963a40", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2022-09-08T00:01:12.540000", "created": "2022-08-09T21:11:58.646000", "tags": [ "dongfangtoutiao", "higeshi", "kuaizip", "\": [ \"http://dl.baofeng.com/baofeng5/bf5_new.exe\" ], \"match\": []" ], "references": [ "g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216.json", "https://www.virustotal.com/graph/g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 162, "hostname": 282, "FileHash-SHA256": 546, "URL": 1042, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 394, "modified_text": "1320 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f1e13d274ac1bbbad03538", "name": "AMDTAs .bin file related to driverpack", "description": "The full list of names and figures has been released by Google, Facebook, Twitter, Instagram, Google and other social media platforms, as well as the BBC's live-streaming service, including:", "modified": "2022-09-08T00:01:12.540000", "created": "2022-08-09T04:23:25.370000", "tags": [ "whois record", "ssl certificate", "new collection", "vt graph", "and china", "whois", "variant sides", "with russia", "swisyn", "catalogue", "ursnif", "remcos", "black basta", "bitrat", "agent tesla", "qakbot" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AIDefenseNet", "id": "102874", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 322, "domain": 21, "hostname": 22, "URL": 32, "FileHash-MD5": 69, "FileHash-SHA1": 69 }, "indicator_count": 535, "is_author": false, "is_subscribing": null, "subscriber_count": 106, "modified_text": "1320 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62ea85a0fe61cd1af7f223a4", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "CVE-2021-22941\nCVE-2017-8977", "modified": "2022-09-02T00:00:40.172000", "created": "2022-08-03T14:26:40.603000", "tags": [ "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2021-22941", "CVE-2017-8977" ], "references": [ "https://hybrid-analysis.com/sample/82b38c9312deb8005122fb331f52898190ac29e26bd464b169f4c60599836f14/62e9cf2b9226df6fea34c0de", "CVE-2021-22941", "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2017-8977", "https://books.google.co.uk/books?id=S3kWAAAAIAAJ&dq=university%2Bof%2Bhuesca&pg=PR3&redir_esc=y#v%3Donepage%26q%3Duniversity%20of%20huesca%26f%3Dfalse" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1326 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e80d56fba248bac0744780", "name": "\ud83e\udd14\ud83d\udea8 Could this be the source of all Evil? \ud83d\udea8\ud83e\udd14 Nubotnet - Team:KU Leuven/test2 - 2021.igem.org", "description": "", "modified": "2022-08-31T00:01:05.509000", "created": "2022-08-01T17:28:54.991000", "tags": [ "apt", "runtime data", "decrypted ssl", "pcap", "windows nt", "tops", "cookie", "typeof t", "element", "error", "matrix", "typeerror", "bmfloor", "frameelement", "null", "skew", "parade" ], "references": [ "https://2021.igem.org/Team:KU_Leuven/test2", "https://hybrid-analysis.com/sample/e126ff94aac3340dc05a27f062c4267cbfeaa998248bef0e72f000bba711aa76/62e6fb475edc950b894aa7b0" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1696, "domain": 586, "hostname": 613, "FileHash-SHA256": 533, "FileHash-MD5": 34, "FileHash-SHA1": 33, "email": 1 }, "indicator_count": 3496, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1328 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e30981f283ef6de2035dce", "name": "bunch of KR muck", "description": "", "modified": "2022-08-27T00:02:51.006000", "created": "2022-07-28T22:11:13.491000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 496, "hostname": 227, "domain": 101 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1332 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62ef94fe252199b1590ba3ea", "name": "MAC MAC ", "description": "", "modified": "2022-08-23T19:03:50.990000", "created": "2022-08-07T10:33:34.943000", "tags": [ "runtime-modules", "malware", "long-sleeps", "exploit", "lnk", "timcast", "Jeeng" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "!#Lowfi:AGGREGATOR:BanloadXorPrev6", "display_name": "!#Lowfi:AGGREGATOR:BanloadXorPrev6", "target": null }, { "id": "ALF:Bit.SpikeAex.rhh_cnt", "display_name": "ALF:Bit.SpikeAex.rhh_cnt", "target": null }, { "id": "ALF:HSTR:Trojan:MSIL/Nagoot.S04", "display_name": "ALF:HSTR:Trojan:MSIL/Nagoot.S04", "target": null } ], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "62dda15076b05b3d9e718df0", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ashikumarkhan", "id": "202999", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 40, "domain": 103, "FileHash-SHA256": 1193, "hostname": 76, "FileHash-MD5": 722, "FileHash-SHA1": 726 }, "indicator_count": 2860, "is_author": false, "is_subscribing": null, "subscriber_count": 2, "modified_text": "1335 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62dda15076b05b3d9e718df0", "name": "KSH; Unix Executable File. MacBook Pro (13-inch, 2019)", "description": "When will someone other than a few understand these MAC's are being shipped with this crap onboard??? Not hard to figure it out!\n\n\n\nThe full text of the text below: \u00c2\u00a31.3m-a-year-old, 1.4m in the run-up to the UK's general election on 5 May.", "modified": "2022-08-23T19:03:50.990000", "created": "2022-07-24T19:45:20.806000", "tags": [ "runtime-modules", "malware", "long-sleeps", "exploit", "lnk", "timcast", "Jeeng" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "!#Lowfi:AGGREGATOR:BanloadXorPrev6", "display_name": "!#Lowfi:AGGREGATOR:BanloadXorPrev6", "target": null }, { "id": "ALF:Bit.SpikeAex.rhh_cnt", "display_name": "ALF:Bit.SpikeAex.rhh_cnt", "target": null }, { "id": "ALF:HSTR:Trojan:MSIL/Nagoot.S04", "display_name": "ALF:HSTR:Trojan:MSIL/Nagoot.S04", "target": null } ], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "MarceeS26", "id": "133143", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 40, "domain": 103, "FileHash-SHA256": 1193, "hostname": 76, "FileHash-MD5": 722, "FileHash-SHA1": 726 }, "indicator_count": 2860, "is_author": false, "is_subscribing": null, "subscriber_count": 74, "modified_text": "1335 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62dd3c2d995db8d35f0b4e48", "name": "How tracker/3rd party abuse translates to much bigger crime netw", "description": "ooo I wonder how much malware is being delivered by numerous means masked in whitelisted and false positive ip's", "modified": "2022-08-23T00:02:12.321000", "created": "2022-07-24T12:33:49.953000", "tags": [], "references": [ "VT graph Json upload to otx", "https://www.virustotal.com/graph/g4655ac448333498bac4fb8b20fed4be62d42ea86d1824fcd9401ba5b30027f57", "can no longer create collections in account - get exceeded api allowance even on just 28 req's in 24 hours", "https://udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1137, "domain": 138, "hostname": 421, "FileHash-SHA256": 893, "CVE": 1 }, "indicator_count": 2590, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1336 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62c035df9d1c1df8ca3fcaea", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2022-08-01T00:01:42.977000", "created": "2022-07-02T12:11:11.592000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "FileHash-SHA256": 2141, "domain": 308, "URL": 2036 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1358 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb08310a8957d97aa23c30", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T13:54:57.927000", "tags": [ "entity", "ubotbrowser", "20.99.132.105", "minecraft" ], "references": [ "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 502, "URL": 1437, "domain": 110, "FileHash-SHA256": 812 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 398, "modified_text": "1362 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://www.virustotal.com/graph/g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216", "https://udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track", "https://www.virustotal.com/graph/g4655ac448333498bac4fb8b20fed4be62d42ea86d1824fcd9401ba5b30027f57", "VT graph Json upload to otx", "https://hybrid-analysis.com/sample/82b38c9312deb8005122fb331f52898190ac29e26bd464b169f4c60599836f14/62e9cf2b9226df6fea34c0de", "CVE-2021-22941", "CVE-2017-8977", "http://e.ca/?e.ca=!1:f.stopPropagation", "can no longer create collections in account - get exceeded api allowance even on just 28 req's in 24 hours", "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc", "https://2021.igem.org/Team:KU_Leuven/test2", "https://books.google.co.uk/books?id=S3kWAAAAIAAJ&dq=university%2Bof%2Bhuesca&pg=PR3&redir_esc=y#v%3Donepage%26q%3Duniversity%20of%20huesca%26f%3Dfalse", "g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216.json", "https://hybrid-analysis.com/sample/e126ff94aac3340dc05a27f062c4267cbfeaa998248bef0e72f000bba711aa76/62e6fb475edc950b894aa7b0" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Alf:hstr:trojan:msil/nagoot.s04", "Alf:bit.spikeaex.rhh_cnt", "!#lowfi:aggregator:banloadxorprev6" ], "industries": [], "unique_indicators": 22698 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/listisima.com", "whois": "http://whois.domaintools.com/listisima.com", "domain": "listisima.com", "hostname": "www.listisima.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 18, "pulses": [ { "id": "6570913a03b8f1cdc6abe32e", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2023-12-06T15:20:26.615000", "created": "2023-12-06T15:20:26.615000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 546, "domain": 162, "URL": 1042, "hostname": 282, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570912e693a2db20f91f6db", "name": "AMDTAs .bin file related to driverpack", "description": "", "modified": "2023-12-06T15:20:14.162000", "created": "2023-12-06T15:20:14.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 322, "FileHash-MD5": 69, "FileHash-SHA1": 69, "URL": 32, "hostname": 22, "domain": 21 }, "indicator_count": 535, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570911c48bd2a6a147f53a2", "name": "MAC MAC", "description": "", "modified": "2023-12-06T15:19:56.535000", "created": "2023-12-06T15:19:56.535000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1193, "FileHash-MD5": 722, "FileHash-SHA1": 726, "hostname": 76, "URL": 40, "domain": 103 }, "indicator_count": 2860, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090fe5e8c659c7e5cb094", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "", "modified": "2023-12-06T15:19:26.152000", "created": "2023-12-06T15:19:26.152000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090e5dc9b2e91369b6c56", "name": "bunch of KR muck", "description": "", "modified": "2023-12-06T15:19:01.428000", "created": "2023-12-06T15:19:01.428000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "hostname": 227, "domain": 101, "URL": 496 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570909ce647711cd92a0dfe", "name": "KSH; Unix Executable File. MacBook Pro (13-inch, 2019)", "description": "", "modified": "2023-12-06T15:17:48.722000", "created": "2023-12-06T15:17:48.722000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1193, "FileHash-MD5": 722, "FileHash-SHA1": 726, "hostname": 76, "URL": 40, "domain": 103 }, "indicator_count": 2860, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090132deb7fd89b09d555", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2023-12-06T15:15:31.177000", "created": "2023-12-06T15:15:31.177000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "domain": 308, "URL": 2036, "FileHash-SHA256": 2141 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708fdef7d4b5483117bb67", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2023-12-06T15:14:38.824000", "created": "2023-12-06T15:14:38.824000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 812, "domain": 110, "hostname": 502, "URL": 1437 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f2cd9eb0a80cca60963a40", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2022-09-08T00:01:12.540000", "created": "2022-08-09T21:11:58.646000", "tags": [ "dongfangtoutiao", "higeshi", "kuaizip", "\": [ \"http://dl.baofeng.com/baofeng5/bf5_new.exe\" ], \"match\": []" ], "references": [ "g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216.json", "https://www.virustotal.com/graph/g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 162, "hostname": 282, "FileHash-SHA256": 546, "URL": 1042, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 394, "modified_text": "1320 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f1e13d274ac1bbbad03538", "name": "AMDTAs .bin file related to driverpack", "description": "The full list of names and figures has been released by Google, Facebook, Twitter, Instagram, Google and other social media platforms, as well as the BBC's live-streaming service, including:", "modified": "2022-09-08T00:01:12.540000", "created": "2022-08-09T04:23:25.370000", "tags": [ "whois record", "ssl certificate", "new collection", "vt graph", "and china", "whois", "variant sides", "with russia", "swisyn", "catalogue", "ursnif", "remcos", "black basta", "bitrat", "agent tesla", "qakbot" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AIDefenseNet", "id": "102874", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 322, "domain": 21, "hostname": 22, "URL": 32, "FileHash-MD5": 69, "FileHash-SHA1": 69 }, "indicator_count": 535, "is_author": false, "is_subscribing": null, "subscriber_count": 106, "modified_text": "1320 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://www.listisima.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://www.listisima.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776692191.9248476 }