{ "type": "Domain", "indicator": "sdstat320d.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/sdstat320d.com", "alexa": "http://www.alexa.com/siteinfo/sdstat320d.com", "indicator": "sdstat320d.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 2138299953, "indicator": "sdstat320d.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 33, "pulses": [ { "id": "63456c2a30b92337ea1670e0", "name": "IOC Records Provided by @NextRayAI", "description": "This IOC report provided and daily updated by NextRay AI Detection & Response Inc.", "modified": "2024-07-16T20:30:56.084000", "created": "2022-10-11T13:14:18.676000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": null, "export_count": 1325, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NextRay-AI", "id": "210822", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 283, "modified_text": "642 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f5828f8217ecbe6ce3a89b", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:29:19.302000", "created": "2024-03-16T11:29:19.302000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 81, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 56, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f5827a4e23b095e5af5f44", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:28:58.984000", "created": "2024-03-16T11:28:58.984000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 50, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f582700d35b0e7c8dd9df8", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:28:48.062000", "created": "2024-03-16T11:28:48.062000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 50, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f5823b9d7bc6b422256296", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:27:55.808000", "created": "2024-03-16T11:27:55.808000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 45, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6510a2dd9c7acab85a26f978", "name": "Phishing sites 2023-09-24", "description": "https://github.com/olbat/ut1-blacklists/blob/master/blacklists/phishing/domains", "modified": "2023-10-24T20:02:37.137000", "created": "2023-09-24T20:58:05.025000", "tags": [ "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "France" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 10, "URL": 5, "domain": 37579, "hostname": 3238 }, "indicator_count": 40832, "is_author": false, "is_subscribing": null, "subscriber_count": 190, "modified_text": "908 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7995af8d4a3461031898b", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-10-02T00:00:29.692000", "created": "2023-08-24T17:54:34.404000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 231, "modified_text": "931 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6507dcf477ef9466c2de35e3", "name": "HIVE (Pulse created by RVS_i_am)", "description": "For more information, please see:\n\nContact info: wnd5xkus@duck.com / kcqhf2ok@duck.com (Email & Phone has 'not been very effective' means of communication)\nTwitter: @NorrisN60014\nDiscord: inawj_2\nMastadon: Disable_Duck@nerdculture.de\n\nOther:\nAlienVault: DISABLE_DUCK\nFileScan: DISABLE_DUCK\nMetadefender: red_snow_ak3jzram", "modified": "2023-09-18T05:15:32.926000", "created": "2023-09-18T05:15:32.926000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "64fa30d707f35d3c9d8bd1cd", "export_count": 43, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 231, "modified_text": "945 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6507dcf100d8bde09b555013", "name": "HIVE (Pulse created by RVS_i_am)", "description": "", "modified": "2023-09-18T05:15:29.671000", "created": "2023-09-18T05:15:29.671000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "64fa30d707f35d3c9d8bd1cd", "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 225, "modified_text": "945 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30d7bc2e4d93884b2a4c", "name": "HIVE", "description": "", "modified": "2023-09-07T20:21:43.678000", "created": "2023-09-07T20:21:43.678000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 48, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30d707f35d3c9d8bd1cd", "name": "HIVE", "description": "", "modified": "2023-09-07T20:21:43.271000", "created": "2023-09-07T20:21:43.271000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 47, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30cce362cbd8ba18c887", "name": "HIVE", "description": "", "modified": "2023-09-07T20:21:32.701000", "created": "2023-09-07T20:21:32.701000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 22, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30c8b0f038985fbce564", "name": "HIVE", "description": "", "modified": "2023-09-07T20:21:28.946000", "created": "2023-09-07T20:21:28.946000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 45, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30b1c5599ae3fd943671", "name": "HIVE", "description": "", "modified": "2023-09-07T20:21:05.125000", "created": "2023-09-07T20:21:05.125000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 45, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30a3429961426a8c9f3f", "name": "HIVE", "description": "", "modified": "2023-09-07T20:20:51.389000", "created": "2023-09-07T20:20:51.389000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 45, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa309b486cb2d0cacbc33e", "name": "HIVE", "description": "", "modified": "2023-09-07T20:20:43.518000", "created": "2023-09-07T20:20:43.518000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 47, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa309b8869335d1a9e6293", "name": "HIVE", "description": "", "modified": "2023-09-07T20:20:43.122000", "created": "2023-09-07T20:20:43.122000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa3090d3eb1de3bad58767", "name": "HIVE", "description": "", "modified": "2023-09-07T20:20:32.583000", "created": "2023-09-07T20:20:32.583000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 46, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa308c07f35d3c9d8bd1cc", "name": "HIVE", "description": "", "modified": "2023-09-07T20:20:28.541000", "created": "2023-09-07T20:20:28.541000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 45, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e799845f4ca1eaee3b9957", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:55:16.165000", "created": "2023-08-24T17:55:16.165000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 227, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e79960d336b6a4b53c561e", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:54:40.425000", "created": "2023-08-24T17:54:40.425000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 224, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7995f5e8231aa87cdddc5", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:54:39.765000", "created": "2023-08-24T17:54:39.765000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 224, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7995ece1da1e24e444a27", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:54:38.909000", "created": "2023-08-24T17:54:38.909000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 228, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e799540d4697a46f8f230c", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:54:28.757000", "created": "2023-08-24T17:54:28.757000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 225, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e799240e77a37a1a1fd255", "name": "IOC Records \u2192 Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:53:40.054000", "created": "2023-08-24T17:53:40.054000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 225, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e79923528ad3eb11ea884c", "name": "IOC Records \u2192 Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:53:39.444000", "created": "2023-08-24T17:53:39.444000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 224, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7992247e0b22db4bd642a", "name": "IOC Records \u2192 Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:53:38.528000", "created": "2023-08-24T17:53:38.528000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 225, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7991e0e88ef39bef95a12", "name": "IOC Records \u2192 Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:53:34.071000", "created": "2023-08-24T17:53:34.071000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 25, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 226, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e79918d81a265ff4d3d514", "name": "IOC Records \u2192 Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:53:28.601000", "created": "2023-08-24T17:53:28.601000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 226, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7990cbf87cda6c38013cf", "name": "IOC Records \u2192 Provided by @NextRayAI", "description": "", "modified": "2023-08-24T17:53:16.082000", "created": "2023-08-24T17:53:16.082000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 228, "modified_text": "970 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64b8f4e0b7008cc32a008d4f", "name": "Novatech Threat Feed", "description": "Large collection of Threats compiled for STIX integrations.", "modified": "2023-08-19T08:04:35.475000", "created": "2023-07-20T08:48:32.024000", "tags": [ "ipv4", "port scan", "indicator", "alienvault", "open threat", "sha1", "misp threat", "actor list", "identify", "frp tool", "volt typhoon", "pla unit", "group", "china", "united", "guard corps", "vulnerabilities", "data extortion", "disk encryption", "sha256", "cisa", "apt group", "fortinet", "mobile", "android", "url request", "exchange", "detection", "techniques", "cactus", "march", "fortinet vpn", "employs unique", "proxyshell", "log4j", "sonicwall", "proxylogon", "unit", "report", "cloud", "attack threats", "teamtnt", "december", "apache log4j2", "docker remote", "threats", "cve202329180", "psirt", "botnet list", "filter", "malware filter", "domains", "data", "list", "emerges", "malware", "horizon", "research", "cril", "trigona", "strain", "beeware", "vice society", "tale", "victim data", "exfiltration", "powershell", "ransomware", "lockbit team", "latest double", "extortion group", "cleaning", "bablock", "rorschach", "otx pulsenamean", "ransom", "delphi", "attacking", "how real", "lockbit", "macho", "macho binaries", "cofense", "latest ato", "ccsg asnas14061", "digitaloceanasn", "spread malware", "qbot banking", "trojan campaign", "emails", "qbot malware", "april", "germany", "argentina", "qakbot", "pinkslipbot", "cobalt strike", "ransomware gang", "continues", "golandbuildpe", "uses revamped", "fin8 uses", "backdoor", "generic trojan", "stopransomware", "otx pulsename", "us department", "health", "social security", "hive ransomware", "uac0050", "remcos program", "court", "kyiv", "team", "ukraine certua", "malicious java", "archive", "access", "polygot", "icedid malware", "cybereason", "iso file", "lnk file", "windows", "ttps", "conti", "fivehands", "a variant", "ciau2019s hive", "attack kit", "hive trapelato", "leads", "threat alert", "million", "ransom payments", "u2013 active", "iocs", "rewterz", "u2013 hive", "november", "rewterz threat", "hive project", "october", "elf file", "virustotal", "xdr33", "trojan", "cia hive", "new backdoor", "urlhaus feed", "9rxd8gdj8", "pvbl1pdbmxc", "ttehg47bmx", "ohr0kszrhp4", "sigremoteadmin1", "analysis" ], "references": [ "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NovatechThreatFeed", "id": "245623", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 34, "FileHash-MD5": 223, "FileHash-SHA1": 226, "FileHash-SHA256": 235, "email": 5, "URL": 8707, "domain": 3482, "hostname": 774 }, "indicator_count": 13686, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "975 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64b8f4d80b0e4b622175ebd5", "name": "Novatech Threat Feed", "description": "Large collection of Threats compiled for STIX integrations.", "modified": "2023-08-19T08:04:35.475000", "created": "2023-07-20T08:48:24.069000", "tags": [ "ipv4", "port scan", "indicator", "alienvault", "open threat", "sha1", "misp threat", "actor list", "identify", "frp tool", "volt typhoon", "pla unit", "group", "china", "united", "guard corps", "vulnerabilities", "data extortion", "disk encryption", "sha256", "cisa", "apt group", "fortinet", "mobile", "android", "url request", "exchange", "detection", "techniques", "cactus", "march", "fortinet vpn", "employs unique", "proxyshell", "log4j", "sonicwall", "proxylogon", "unit", "report", "cloud", "attack threats", "teamtnt", "december", "apache log4j2", "docker remote", "threats", "cve202329180", "psirt", "botnet list", "filter", "malware filter", "domains", "data", "list", "emerges", "malware", "horizon", "research", "cril", "trigona", "strain", "beeware", "vice society", "tale", "victim data", "exfiltration", "powershell", "ransomware", "lockbit team", "latest double", "extortion group", "cleaning", "bablock", "rorschach", "otx pulsenamean", "ransom", "delphi", "attacking", "how real", "lockbit", "macho", "macho binaries", "cofense", "latest ato", "ccsg asnas14061", "digitaloceanasn", "spread malware", "qbot banking", "trojan campaign", "emails", "qbot malware", "april", "germany", "argentina", "qakbot", "pinkslipbot", "cobalt strike", "ransomware gang", "continues", "golandbuildpe", "uses revamped", "fin8 uses", "backdoor", "generic trojan", "stopransomware", "otx pulsename", "us department", "health", "social security", "hive ransomware", "uac0050", "remcos program", "court", "kyiv", "team", "ukraine certua", "malicious java", "archive", "access", "polygot", "icedid malware", "cybereason", "iso file", "lnk file", "windows", "ttps", "conti", "fivehands", "a variant", "ciau2019s hive", "attack kit", "hive trapelato", "leads", "threat alert", "million", "ransom payments", "u2013 active", "iocs", "rewterz", "u2013 hive", "november", "rewterz threat", "hive project", "october", "elf file", "virustotal", "xdr33", "trojan", "cia hive", "new backdoor", "urlhaus feed", "9rxd8gdj8", "pvbl1pdbmxc", "ttehg47bmx", "ohr0kszrhp4", "sigremoteadmin1", "analysis" ], "references": [ "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 163208, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NovatechThreatFeed", "id": "245623", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 34, "FileHash-MD5": 223, "FileHash-SHA1": 226, "FileHash-SHA256": 235, "email": 5, "URL": 8707, "domain": 3482, "hostname": 774 }, "indicator_count": 13686, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "975 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638650c73af5f40f7ba6977f", "name": "URLhaus feed IOCs - multiple malware families", "description": "https://urlhaus.abuse.ch/feeds/asn/22612/", "modified": "2022-12-29T18:06:00.139000", "created": "2022-11-29T18:34:47.361000", "tags": [ "emotetheodo", "dridex", "agentteslaexe", "azorultexe", "qakbot", "gozi", "icedid", "dridexopendir", "danabot", "heodo", "trickbot", "azorult", "hawkeye", "arkeistealer", "remcosrat", "agenttesla", "systembc", "kpotstealer", "darkrat", "troldesh", "quasarrat", "stealer", "formbook", "zloader", "phorpiex", "pony", "nanocore", "kpot", "raccoonstealer", "remcos", "loader", "qealler", "luminositylink", "hancitor", "nemty", "servhelper", "netwire", "gandcrab", "loki" ], "references": [ "https://urlhaus.abuse.ch/feeds/asn/22612/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Techronik", "id": "114546", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 14, "URL": 8676, "domain": 2891, "hostname": 334 }, "indicator_count": 11915, "is_author": false, "is_subscribing": null, "subscriber_count": 85, "modified_text": "1208 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://urlhaus.abuse.ch/feeds/asn/22612/", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [ "Defense", "Government", "Industrial" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 33, "pulses": [ { "id": "63456c2a30b92337ea1670e0", "name": "IOC Records Provided by @NextRayAI", "description": "This IOC report provided and daily updated by NextRay AI Detection & Response Inc.", "modified": "2024-07-16T20:30:56.084000", "created": "2022-10-11T13:14:18.676000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": null, "export_count": 1325, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NextRay-AI", "id": "210822", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 283, "modified_text": "642 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f5828f8217ecbe6ce3a89b", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:29:19.302000", "created": "2024-03-16T11:29:19.302000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 81, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 56, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f5827a4e23b095e5af5f44", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:28:58.984000", "created": "2024-03-16T11:28:58.984000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 50, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f582700d35b0e7c8dd9df8", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:28:48.062000", "created": "2024-03-16T11:28:48.062000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 50, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f5823b9d7bc6b422256296", "name": "IOCs Industriales", "description": "", "modified": "2024-03-16T11:27:55.808000", "created": "2024-03-16T11:27:55.808000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dtatov00", "id": "256758", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 45, "modified_text": "765 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6510a2dd9c7acab85a26f978", "name": "Phishing sites 2023-09-24", "description": "https://github.com/olbat/ut1-blacklists/blob/master/blacklists/phishing/domains", "modified": "2023-10-24T20:02:37.137000", "created": "2023-09-24T20:58:05.025000", "tags": [ "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "France" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 10, "URL": 5, "domain": 37579, "hostname": 3238 }, "indicator_count": 40832, "is_author": false, "is_subscribing": null, "subscriber_count": 190, "modified_text": "908 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7995af8d4a3461031898b", "name": "IOC Records \u2192Provided by @NextRayAI", "description": "", "modified": "2023-10-02T00:00:29.692000", "created": "2023-08-24T17:54:34.404000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 231, "modified_text": "931 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6507dcf477ef9466c2de35e3", "name": "HIVE (Pulse created by RVS_i_am)", "description": "For more information, please see:\n\nContact info: wnd5xkus@duck.com / kcqhf2ok@duck.com (Email & Phone has 'not been very effective' means of communication)\nTwitter: @NorrisN60014\nDiscord: inawj_2\nMastadon: Disable_Duck@nerdculture.de\n\nOther:\nAlienVault: DISABLE_DUCK\nFileScan: DISABLE_DUCK\nMetadefender: red_snow_ak3jzram", "modified": "2023-09-18T05:15:32.926000", "created": "2023-09-18T05:15:32.926000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "64fa30d707f35d3c9d8bd1cd", "export_count": 43, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 231, "modified_text": "945 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6507dcf100d8bde09b555013", "name": "HIVE (Pulse created by RVS_i_am)", "description": "", "modified": "2023-09-18T05:15:29.671000", "created": "2023-09-18T05:15:29.671000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "64fa30d707f35d3c9d8bd1cd", "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 225, "modified_text": "945 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fa30d7bc2e4d93884b2a4c", "name": "HIVE", "description": "", "modified": "2023-09-07T20:21:43.678000", "created": "2023-09-07T20:21:43.678000", "tags": [ "Nextray", "cyber security", "ioc", "phishing", "malicious" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Turkey", "Ukraine", "Romania", "Czechia", "United Kingdom of Great Britain and Northern Ireland", "Norway", "Lithuania", "Estonia", "Latvia", "Poland", "Germany", "Canada", "France", "Denmark" ], "malware_families": [], "attack_ids": [], "industries": [ "Defense", "Industrial", "Government" ], "TLP": "white", "cloned_from": "63456c2a30b92337ea1670e0", "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "RVS_i_am", "id": "251642", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 493080, "IPv4": 3458, "IPv6": 519, "hostname": 41105, "URL": 155223, "CIDR": 5266 }, "indicator_count": 698651, "is_author": false, "is_subscribing": null, "subscriber_count": 48, "modified_text": "955 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "sdstat320d.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "sdstat320d.com", "found": true, "verdict": "malicious", "url_count": 11, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "http://sdstat320d.com/dave.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "backdoor", "DCRS", "QuasarRAT" ] }, { "url": "http://sdstat320d.com/qw.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "ArkeiStealer", "Vidar" ] }, { "url": "http://sdstat320d.com/socks111.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "SystemBC" ] }, { "url": "http://sdstat320d.com/socks111.dll", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "SystemBC" ] }, { "url": "http://sdstat320d.com/crot777amx.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "emotet", "heodo", "Kpot", "KPOTStealer", "PredatorStealer" ] }, { "url": "http://sdstat320d.com/crot777mx.dll", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "Kpot" ] }, { "url": "http://sdstat320d.com/ad/ad777.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "PredatorStealer" ] }, { "url": "http://sdstat320d.com/sky/crot777plt.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "Kpot" ] }, { "url": "http://sdstat320d.com/skd.exe", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "ServHelper" ] }, { "url": "http://sdstat320d.com/dan777.dll", "status": "offline", "threat": "malware_download", "date_added": "2019-09-22", "tags": [ "DanaBot" ] } ], "error": null }, "from_cache": true, "_cached_at": 1776712435.9591658 }