{
  "type": "Domain",
  "indicator": "mrt.app",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/mrt.app",
    "alexa": "http://www.alexa.com/siteinfo/mrt.app",
    "indicator": "mrt.app",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 2752474112,
      "indicator": "mrt.app",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 5,
      "pulses": [
        {
          "id": "695cc5b5337bc1ac1273946a",
          "name": "Macbook Air Macbook Air",
          "description": "Macbook Air Macbook Air",
          "modified": "2026-02-05T07:00:52.044000",
          "created": "2026-01-06T08:20:05.305000",
          "tags": [
            "doctype",
            "public",
            "data",
            "drive",
            "problems1",
            "no problems",
            "upload",
            "tue aug",
            "scanid",
            "archivetype",
            "june",
            "look",
            "accept",
            "internal",
            "ransomware",
            "error",
            "trace",
            "sparkle",
            "fusion",
            "alphabet",
            "path",
            "archivesize",
            "archivemd5",
            "archivesha256",
            "open",
            "whirlpool",
            "syst",
            "stream",
            "mercury",
            "import",
            "info",
            "dangerous file",
            "modified",
            "tue jul",
            "mon sep",
            "mon mar",
            "sigtype1",
            "false",
            "warp",
            "powershell",
            "specs",
            "subscore1",
            "Mac",
            "Apple"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Disable_Duck",
            "id": "244325",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 12573,
            "FileHash-SHA1": 14594,
            "FileHash-SHA256": 12489,
            "URL": 88,
            "domain": 98,
            "email": 15,
            "hostname": 119
          },
          "indicator_count": 39976,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 129,
          "modified_text": "117 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "68629f622fe936e3141a1ed0",
          "name": "APT33 (by ilyailya)",
          "description": "",
          "modified": "2025-06-30T14:29:54.892000",
          "created": "2025-06-30T14:29:54.892000",
          "tags": [
            "apfs encryption",
            "adguard extra",
            "jumpcloud go",
            "chrome web",
            "store",
            "privacy badger",
            "safety checker",
            "stay",
            "mywot",
            "flowcrypt",
            "encrypt gmail",
            "simple",
            "facebook",
            "apollo",
            "future",
            "assistant",
            "excbreakpoint",
            "sigtrap",
            "excguard",
            "renderer",
            "vallumes",
            "excbadaccess",
            "sigsegv",
            "helper",
            "chrome helper",
            "exccrash",
            "rave scout",
            "cookies",
            "public folder",
            "browsersignin",
            "denyactivation",
            "disableoverride",
            "loginwindowtext",
            "jumpcloud",
            "disableairdrop",
            "enablefirewall",
            "macos14action",
            "macos13action",
            "showfullname",
            "arm64e",
            "apple m2",
            "mac142",
            "kjqqtw7pqt",
            "yubico",
            "daemon",
            "service",
            "server",
            "open directory",
            "account",
            "kerberos admin",
            "kerberos change",
            "io daemon",
            "device daemon",
            "network",
            "bridge",
            "desktop",
            "installer",
            "calendar",
            "screensaver",
            "agent",
            "adaptive",
            "interactive",
            "background",
            "standard",
            "launchd sandbox",
            "s mdworker",
            "command line",
            "cloud",
            "remote assist",
            "aesxtsarm",
            "aesecbarm",
            "darwin kernel",
            "version",
            "fri apr",
            "sha512vngarmhw",
            "sha384vngarmhw",
            "sha256vngarm",
            "sha1vngarm",
            "user",
            "coregraphics",
            "quartzcore",
            "dock",
            "corefoundation",
            "cgimage",
            "cgcolorspace",
            "load address",
            "identifier",
            "build info",
            "code type"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": "6816697e166bba8972d8d4a3",
          "export_count": 14,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 125,
            "hostname": 402,
            "FileHash-SHA256": 38,
            "URL": 582,
            "CVE": 1
          },
          "indicator_count": 1148,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 143,
          "modified_text": "337 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6816697e166bba8972d8d4a3",
          "name": "APT33",
          "description": "APT33",
          "modified": "2025-06-02T18:02:26.651000",
          "created": "2025-05-03T19:07:42.325000",
          "tags": [
            "apfs encryption",
            "adguard extra",
            "jumpcloud go",
            "chrome web",
            "store",
            "privacy badger",
            "safety checker",
            "stay",
            "mywot",
            "flowcrypt",
            "encrypt gmail",
            "simple",
            "facebook",
            "apollo",
            "future",
            "assistant",
            "excbreakpoint",
            "sigtrap",
            "excguard",
            "renderer",
            "vallumes",
            "excbadaccess",
            "sigsegv",
            "helper",
            "chrome helper",
            "exccrash",
            "rave scout",
            "cookies",
            "public folder",
            "browsersignin",
            "denyactivation",
            "disableoverride",
            "loginwindowtext",
            "jumpcloud",
            "disableairdrop",
            "enablefirewall",
            "macos14action",
            "macos13action",
            "showfullname",
            "arm64e",
            "apple m2",
            "mac142",
            "kjqqtw7pqt",
            "yubico",
            "daemon",
            "service",
            "server",
            "open directory",
            "account",
            "kerberos admin",
            "kerberos change",
            "io daemon",
            "device daemon",
            "network",
            "bridge",
            "desktop",
            "installer",
            "calendar",
            "screensaver",
            "agent",
            "adaptive",
            "interactive",
            "background",
            "standard",
            "launchd sandbox",
            "s mdworker",
            "command line",
            "cloud",
            "remote assist",
            "aesxtsarm",
            "aesecbarm",
            "darwin kernel",
            "version",
            "fri apr",
            "sha512vngarmhw",
            "sha384vngarmhw",
            "sha256vngarm",
            "sha1vngarm",
            "user",
            "coregraphics",
            "quartzcore",
            "dock",
            "corefoundation",
            "cgimage",
            "cgcolorspace",
            "load address",
            "identifier",
            "build info",
            "code type"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "ilyailya",
            "id": "298851",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 125,
            "hostname": 402,
            "FileHash-SHA256": 38,
            "URL": 582,
            "CVE": 1
          },
          "indicator_count": 1148,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 32,
          "modified_text": "365 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "621585117f08299bfcf34912",
          "name": "02.22.2022",
          "description": "",
          "modified": "2022-03-24T00:00:00.271000",
          "created": "2022-02-23T00:51:29.210000",
          "tags": [
            "private",
            "macintosh hd",
            "sbin",
            "create",
            "adding client",
            "finalize disk",
            "product",
            "will",
            "pk session",
            "bundle",
            "macbookair root",
            "progress",
            "packagekit",
            "install scripts",
            "chooser"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America",
            "France"
          ],
          "malware_families": [
            {
              "id": "Win.Trojan.Delphi-9787345-0",
              "display_name": "Win.Trojan.Delphi-9787345-0",
              "target": null
            },
            {
              "id": "Trojan:Win32/Leivion.L",
              "display_name": "Trojan:Win32/Leivion.L",
              "target": "/malware/Trojan:Win32/Leivion.L"
            },
            {
              "id": "Win.Malware.Delf-6899401-0",
              "display_name": "Win.Malware.Delf-6899401-0",
              "target": null
            },
            {
              "id": "Worm:Win32/AutoRun!atmn",
              "display_name": "Worm:Win32/AutoRun!atmn",
              "target": "/malware/Worm:Win32/AutoRun!atmn"
            },
            {
              "id": "Win32:Crypt-SKC\\ [Trj]",
              "display_name": "Win32:Crypt-SKC\\ [Trj]",
              "target": null
            },
            {
              "id": "#Lowfi:HSTR:Win32/Exprio.gen!lowfi",
              "display_name": "#Lowfi:HSTR:Win32/Exprio.gen!lowfi",
              "target": null
            },
            {
              "id": "Win.Malware.Delphi-9787239-0",
              "display_name": "Win.Malware.Delphi-9787239-0",
              "target": null
            }
          ],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 6,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Kailula4",
            "id": "131997",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 431,
            "URL": 899,
            "domain": 104,
            "FileHash-SHA256": 22,
            "FileHash-SHA1": 15
          },
          "indicator_count": 1471,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 405,
          "modified_text": "1531 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "621593e48a67efa5379a31e4",
          "name": "MacBook 2.22.22 (Logs)",
          "description": "",
          "modified": "2022-03-24T00:00:00.271000",
          "created": "2022-02-23T01:54:44.013000",
          "tags": [],
          "references": [
            "Sync 2.22.22.pdf",
            "MB Logs 2.22.22.pdf",
            "Applications 2.22.22.pdf",
            "Install 2.22.22.pdf",
            "frameworks 2.22.22.pdf",
            "Extensions 2.22.22.pdf",
            "Fonts 2.22.22.pdf",
            "appliacations 2.22.22.pdf",
            "power 2.22.22.pdf",
            "wifi 2.22.22.pdf"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [
            {
              "id": "Backdoor:Linux/Gafgyt.AI!MTB",
              "display_name": "Backdoor:Linux/Gafgyt.AI!MTB",
              "target": "/malware/Backdoor:Linux/Gafgyt.AI!MTB"
            },
            {
              "id": "Unix.Trojan.Gafgyt-6981154-0",
              "display_name": "Unix.Trojan.Gafgyt-6981154-0",
              "target": null
            },
            {
              "id": "ELF:Agent-AYQ\\ [Trj]",
              "display_name": "ELF:Agent-AYQ\\ [Trj]",
              "target": null
            },
            {
              "id": "Win32:Mobigame-C\\ [Adw]",
              "display_name": "Win32:Mobigame-C\\ [Adw]",
              "target": null
            }
          ],
          "attack_ids": [],
          "industries": [
            "Technology"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 5,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Kailula4",
            "id": "131997",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 58,
            "URL": 24,
            "hostname": 27,
            "FileHash-SHA256": 126,
            "FileHash-MD5": 190,
            "FileHash-SHA1": 49,
            "email": 11
          },
          "indicator_count": 485,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 406,
          "modified_text": "1531 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "power 2.22.22.pdf",
        "Fonts 2.22.22.pdf",
        "Sync 2.22.22.pdf",
        "Applications 2.22.22.pdf",
        "MB Logs 2.22.22.pdf",
        "appliacations 2.22.22.pdf",
        "Extensions 2.22.22.pdf",
        "wifi 2.22.22.pdf",
        "frameworks 2.22.22.pdf",
        "Install 2.22.22.pdf"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Elf:agent-ayq\\ [trj]",
            "Win.malware.delphi-9787239-0",
            "Unix.trojan.gafgyt-6981154-0",
            "Worm:win32/autorun!atmn",
            "Trojan:win32/leivion.l",
            "Win.trojan.delphi-9787345-0",
            "#lowfi:hstr:win32/exprio.gen!lowfi",
            "Win32:mobigame-c\\ [adw]",
            "Backdoor:linux/gafgyt.ai!mtb",
            "Win.malware.delf-6899401-0",
            "Win32:crypt-skc\\ [trj]"
          ],
          "industries": [
            "Technology"
          ]
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 5,
  "pulses": [
    {
      "id": "695cc5b5337bc1ac1273946a",
      "name": "Macbook Air Macbook Air",
      "description": "Macbook Air Macbook Air",
      "modified": "2026-02-05T07:00:52.044000",
      "created": "2026-01-06T08:20:05.305000",
      "tags": [
        "doctype",
        "public",
        "data",
        "drive",
        "problems1",
        "no problems",
        "upload",
        "tue aug",
        "scanid",
        "archivetype",
        "june",
        "look",
        "accept",
        "internal",
        "ransomware",
        "error",
        "trace",
        "sparkle",
        "fusion",
        "alphabet",
        "path",
        "archivesize",
        "archivemd5",
        "archivesha256",
        "open",
        "whirlpool",
        "syst",
        "stream",
        "mercury",
        "import",
        "info",
        "dangerous file",
        "modified",
        "tue jul",
        "mon sep",
        "mon mar",
        "sigtype1",
        "false",
        "warp",
        "powershell",
        "specs",
        "subscore1",
        "Mac",
        "Apple"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Disable_Duck",
        "id": "244325",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 12573,
        "FileHash-SHA1": 14594,
        "FileHash-SHA256": 12489,
        "URL": 88,
        "domain": 98,
        "email": 15,
        "hostname": 119
      },
      "indicator_count": 39976,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 129,
      "modified_text": "117 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "68629f622fe936e3141a1ed0",
      "name": "APT33 (by ilyailya)",
      "description": "",
      "modified": "2025-06-30T14:29:54.892000",
      "created": "2025-06-30T14:29:54.892000",
      "tags": [
        "apfs encryption",
        "adguard extra",
        "jumpcloud go",
        "chrome web",
        "store",
        "privacy badger",
        "safety checker",
        "stay",
        "mywot",
        "flowcrypt",
        "encrypt gmail",
        "simple",
        "facebook",
        "apollo",
        "future",
        "assistant",
        "excbreakpoint",
        "sigtrap",
        "excguard",
        "renderer",
        "vallumes",
        "excbadaccess",
        "sigsegv",
        "helper",
        "chrome helper",
        "exccrash",
        "rave scout",
        "cookies",
        "public folder",
        "browsersignin",
        "denyactivation",
        "disableoverride",
        "loginwindowtext",
        "jumpcloud",
        "disableairdrop",
        "enablefirewall",
        "macos14action",
        "macos13action",
        "showfullname",
        "arm64e",
        "apple m2",
        "mac142",
        "kjqqtw7pqt",
        "yubico",
        "daemon",
        "service",
        "server",
        "open directory",
        "account",
        "kerberos admin",
        "kerberos change",
        "io daemon",
        "device daemon",
        "network",
        "bridge",
        "desktop",
        "installer",
        "calendar",
        "screensaver",
        "agent",
        "adaptive",
        "interactive",
        "background",
        "standard",
        "launchd sandbox",
        "s mdworker",
        "command line",
        "cloud",
        "remote assist",
        "aesxtsarm",
        "aesecbarm",
        "darwin kernel",
        "version",
        "fri apr",
        "sha512vngarmhw",
        "sha384vngarmhw",
        "sha256vngarm",
        "sha1vngarm",
        "user",
        "coregraphics",
        "quartzcore",
        "dock",
        "corefoundation",
        "cgimage",
        "cgcolorspace",
        "load address",
        "identifier",
        "build info",
        "code type"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": "6816697e166bba8972d8d4a3",
      "export_count": 14,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 125,
        "hostname": 402,
        "FileHash-SHA256": 38,
        "URL": 582,
        "CVE": 1
      },
      "indicator_count": 1148,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 143,
      "modified_text": "337 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6816697e166bba8972d8d4a3",
      "name": "APT33",
      "description": "APT33",
      "modified": "2025-06-02T18:02:26.651000",
      "created": "2025-05-03T19:07:42.325000",
      "tags": [
        "apfs encryption",
        "adguard extra",
        "jumpcloud go",
        "chrome web",
        "store",
        "privacy badger",
        "safety checker",
        "stay",
        "mywot",
        "flowcrypt",
        "encrypt gmail",
        "simple",
        "facebook",
        "apollo",
        "future",
        "assistant",
        "excbreakpoint",
        "sigtrap",
        "excguard",
        "renderer",
        "vallumes",
        "excbadaccess",
        "sigsegv",
        "helper",
        "chrome helper",
        "exccrash",
        "rave scout",
        "cookies",
        "public folder",
        "browsersignin",
        "denyactivation",
        "disableoverride",
        "loginwindowtext",
        "jumpcloud",
        "disableairdrop",
        "enablefirewall",
        "macos14action",
        "macos13action",
        "showfullname",
        "arm64e",
        "apple m2",
        "mac142",
        "kjqqtw7pqt",
        "yubico",
        "daemon",
        "service",
        "server",
        "open directory",
        "account",
        "kerberos admin",
        "kerberos change",
        "io daemon",
        "device daemon",
        "network",
        "bridge",
        "desktop",
        "installer",
        "calendar",
        "screensaver",
        "agent",
        "adaptive",
        "interactive",
        "background",
        "standard",
        "launchd sandbox",
        "s mdworker",
        "command line",
        "cloud",
        "remote assist",
        "aesxtsarm",
        "aesecbarm",
        "darwin kernel",
        "version",
        "fri apr",
        "sha512vngarmhw",
        "sha384vngarmhw",
        "sha256vngarm",
        "sha1vngarm",
        "user",
        "coregraphics",
        "quartzcore",
        "dock",
        "corefoundation",
        "cgimage",
        "cgcolorspace",
        "load address",
        "identifier",
        "build info",
        "code type"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 13,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "ilyailya",
        "id": "298851",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 125,
        "hostname": 402,
        "FileHash-SHA256": 38,
        "URL": 582,
        "CVE": 1
      },
      "indicator_count": 1148,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 32,
      "modified_text": "365 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "621585117f08299bfcf34912",
      "name": "02.22.2022",
      "description": "",
      "modified": "2022-03-24T00:00:00.271000",
      "created": "2022-02-23T00:51:29.210000",
      "tags": [
        "private",
        "macintosh hd",
        "sbin",
        "create",
        "adding client",
        "finalize disk",
        "product",
        "will",
        "pk session",
        "bundle",
        "macbookair root",
        "progress",
        "packagekit",
        "install scripts",
        "chooser"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America",
        "France"
      ],
      "malware_families": [
        {
          "id": "Win.Trojan.Delphi-9787345-0",
          "display_name": "Win.Trojan.Delphi-9787345-0",
          "target": null
        },
        {
          "id": "Trojan:Win32/Leivion.L",
          "display_name": "Trojan:Win32/Leivion.L",
          "target": "/malware/Trojan:Win32/Leivion.L"
        },
        {
          "id": "Win.Malware.Delf-6899401-0",
          "display_name": "Win.Malware.Delf-6899401-0",
          "target": null
        },
        {
          "id": "Worm:Win32/AutoRun!atmn",
          "display_name": "Worm:Win32/AutoRun!atmn",
          "target": "/malware/Worm:Win32/AutoRun!atmn"
        },
        {
          "id": "Win32:Crypt-SKC\\ [Trj]",
          "display_name": "Win32:Crypt-SKC\\ [Trj]",
          "target": null
        },
        {
          "id": "#Lowfi:HSTR:Win32/Exprio.gen!lowfi",
          "display_name": "#Lowfi:HSTR:Win32/Exprio.gen!lowfi",
          "target": null
        },
        {
          "id": "Win.Malware.Delphi-9787239-0",
          "display_name": "Win.Malware.Delphi-9787239-0",
          "target": null
        }
      ],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 6,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Kailula4",
        "id": "131997",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 431,
        "URL": 899,
        "domain": 104,
        "FileHash-SHA256": 22,
        "FileHash-SHA1": 15
      },
      "indicator_count": 1471,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 405,
      "modified_text": "1531 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "621593e48a67efa5379a31e4",
      "name": "MacBook 2.22.22 (Logs)",
      "description": "",
      "modified": "2022-03-24T00:00:00.271000",
      "created": "2022-02-23T01:54:44.013000",
      "tags": [],
      "references": [
        "Sync 2.22.22.pdf",
        "MB Logs 2.22.22.pdf",
        "Applications 2.22.22.pdf",
        "Install 2.22.22.pdf",
        "frameworks 2.22.22.pdf",
        "Extensions 2.22.22.pdf",
        "Fonts 2.22.22.pdf",
        "appliacations 2.22.22.pdf",
        "power 2.22.22.pdf",
        "wifi 2.22.22.pdf"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [
        {
          "id": "Backdoor:Linux/Gafgyt.AI!MTB",
          "display_name": "Backdoor:Linux/Gafgyt.AI!MTB",
          "target": "/malware/Backdoor:Linux/Gafgyt.AI!MTB"
        },
        {
          "id": "Unix.Trojan.Gafgyt-6981154-0",
          "display_name": "Unix.Trojan.Gafgyt-6981154-0",
          "target": null
        },
        {
          "id": "ELF:Agent-AYQ\\ [Trj]",
          "display_name": "ELF:Agent-AYQ\\ [Trj]",
          "target": null
        },
        {
          "id": "Win32:Mobigame-C\\ [Adw]",
          "display_name": "Win32:Mobigame-C\\ [Adw]",
          "target": null
        }
      ],
      "attack_ids": [],
      "industries": [
        "Technology"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 5,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Kailula4",
        "id": "131997",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 58,
        "URL": 24,
        "hostname": 27,
        "FileHash-SHA256": 126,
        "FileHash-MD5": 190,
        "FileHash-SHA1": 49,
        "email": 11
      },
      "indicator_count": 485,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 406,
      "modified_text": "1531 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "mrt.app",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "mrt.app",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780440282.964872
}