{ "type": "Domain", "indicator": "techsystembot.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/techsystembot.com", "alexa": "http://www.alexa.com/siteinfo/techsystembot.com", "indicator": "techsystembot.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3144363097, "indicator": "techsystembot.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 8, "pulses": [ { "id": "6570a7fc464f9f56ac33a389", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "", "modified": "2023-12-06T16:57:32.030000", "created": "2023-12-06T16:57:32.030000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 3487, "domain": 3202, "CVE": 5, "FileHash-SHA256": 1943, "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 114, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a7e7daf278491d9f9eb4", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "", "modified": "2023-12-06T16:57:11.228000", "created": "2023-12-06T16:57:11.228000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 3487, "domain": 3202, "CVE": 5, "FileHash-SHA256": 1943, "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "652044fb2f28d46e91d29160", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "Packed. Miscellaneous Attacks. Hidden Users \nTarget: tsara brashears", "modified": "2023-11-05T14:05:48.545000", "created": "2023-10-06T17:33:47.403000", "tags": [ "ssl certificate", "whois whois", "iocs", "milum botnet", "army", "isp stuff", "whois record", "travel stuff", "misp", "threat roundup", "july", "apple", "password", "apple ios", "whois", "emotet", "powershell", "hacktool", "crypto", "pornhub", "tulach", "tsara", "camera", "connect", "tsara brashears", "brashears", "scanning_host", "trojan", "phishing", "afro", "june", "misc attack", "et tor", "known tor", "relayrouter", "exit", "node traffic", "http traffic", "suricata alerts", "event category", "description sid", "websma", "webabo", "cisco umbrella", "site", "safe site", "alexa top", "million", "malware", "alexa", "heur", "malicious site", "malicious url", "unsafe", "agent", "phishing", "riskware", "bank", "iframe", "downldr", "presenoker", "artemis", "genkryptik", "fuery", "wacatac", "azorult", "service", "runescape", "facebook", "download", "union", "team", "opencandy", "exploit", "mimikatz", "blacklist https", "a1mara" ], "references": [ "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "Research and Data Analysis", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8" ], "public": 1, "adversary": "Tulach", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1070.003", "name": "Clear Command History", "display_name": "T1070.003 - Clear Command History" }, { "id": "T1147", "name": "Hidden Users", "display_name": "T1147 - Hidden Users" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56, "FileHash-SHA256": 1943, "domain": 3202, "hostname": 3487, "CVE": 5 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 226, "modified_text": "896 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65204565ac1e8bce4de26df3", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "Packed. Miscellaneous Attacks. Hidden Users \nTarget: tsara brashears", "modified": "2023-11-05T14:05:48.545000", "created": "2023-10-06T17:35:33.618000", "tags": [ "ssl certificate", "whois whois", "iocs", "milum botnet", "army", "isp stuff", "whois record", "travel stuff", "misp", "threat roundup", "july", "apple", "password", "apple ios", "whois", "emotet", "powershell", "hacktool", "crypto", "pornhub", "tulach", "tsara", "camera", "connect", "tsara brashears", "brashears", "scanning_host", "trojan", "phishing", "afro", "june", "misc attack", "et tor", "known tor", "relayrouter", "exit", "node traffic", "http traffic", "suricata alerts", "event category", "description sid", "websma", "webabo", "cisco umbrella", "site", "safe site", "alexa top", "million", "malware", "alexa", "heur", "malicious site", "malicious url", "unsafe", "agent", "phishing", "riskware", "bank", "iframe", "downldr", "presenoker", "artemis", "genkryptik", "fuery", "wacatac", "azorult", "service", "runescape", "facebook", "download", "union", "team", "opencandy", "exploit", "mimikatz", "blacklist https", "a1mara" ], "references": [ "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "Research and Data Analysis", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8" ], "public": 1, "adversary": "Tulach", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1070.003", "name": "Clear Command History", "display_name": "T1070.003 - Clear Command History" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56, "FileHash-SHA256": 1943, "domain": 3202, "hostname": 3487, "CVE": 5 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 226, "modified_text": "896 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "653f1df9a7da086561b9897f", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "", "modified": "2023-11-05T14:05:48.545000", "created": "2023-10-30T03:07:37.963000", "tags": [ "ssl certificate", "whois whois", "iocs", "milum botnet", "army", "isp stuff", "whois record", "travel stuff", "misp", "threat roundup", "july", "apple", "password", "apple ios", "whois", "emotet", "powershell", "hacktool", "crypto", "pornhub", "tulach", "tsara", "camera", "connect", "tsara brashears", "brashears", "scanning_host", "trojan", "phishing", "afro", "june", "misc attack", "et tor", "known tor", "relayrouter", "exit", "node traffic", "http traffic", "suricata alerts", "event category", "description sid", "websma", "webabo", "cisco umbrella", "site", "safe site", "alexa top", "million", "malware", "alexa", "heur", "malicious site", "malicious url", "unsafe", "agent", "phishing", "riskware", "bank", "iframe", "downldr", "presenoker", "artemis", "genkryptik", "fuery", "wacatac", "azorult", "service", "runescape", "facebook", "download", "union", "team", "opencandy", "exploit", "mimikatz", "blacklist https", "a1mara" ], "references": [ "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "Research and Data Analysis", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8" ], "public": 1, "adversary": "Tulach", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1070.003", "name": "Clear Command History", "display_name": "T1070.003 - Clear Command History" } ], "industries": [], "TLP": "white", "cloned_from": "65204565ac1e8bce4de26df3", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56, "FileHash-SHA256": 1943, "domain": 3202, "hostname": 3487, "CVE": 5 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 218, "modified_text": "896 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64b8f4d80b0e4b622175ebd5", "name": "Novatech Threat Feed", "description": "Large collection of Threats compiled for STIX integrations.", "modified": "2023-08-19T08:04:35.475000", "created": "2023-07-20T08:48:24.069000", "tags": [ "ipv4", "port scan", "indicator", "alienvault", "open threat", "sha1", "misp threat", "actor list", "identify", "frp tool", "volt typhoon", "pla unit", "group", "china", "united", "guard corps", "vulnerabilities", "data extortion", "disk encryption", "sha256", "cisa", "apt group", "fortinet", "mobile", "android", "url request", "exchange", "detection", "techniques", "cactus", "march", "fortinet vpn", "employs unique", "proxyshell", "log4j", "sonicwall", "proxylogon", "unit", "report", "cloud", "attack threats", "teamtnt", "december", "apache log4j2", "docker remote", "threats", "cve202329180", "psirt", "botnet list", "filter", "malware filter", "domains", "data", "list", "emerges", "malware", "horizon", "research", "cril", "trigona", "strain", "beeware", "vice society", "tale", "victim data", "exfiltration", "powershell", "ransomware", "lockbit team", "latest double", "extortion group", "cleaning", "bablock", "rorschach", "otx pulsenamean", "ransom", "delphi", "attacking", "how real", "lockbit", "macho", "macho binaries", "cofense", "latest ato", "ccsg asnas14061", "digitaloceanasn", "spread malware", "qbot banking", "trojan campaign", "emails", "qbot malware", "april", "germany", "argentina", "qakbot", "pinkslipbot", "cobalt strike", "ransomware gang", "continues", "golandbuildpe", "uses revamped", "fin8 uses", "backdoor", "generic trojan", "stopransomware", "otx pulsename", "us department", "health", "social security", "hive ransomware", "uac0050", "remcos program", "court", "kyiv", "team", "ukraine certua", "malicious java", "archive", "access", "polygot", "icedid malware", "cybereason", "iso file", "lnk file", "windows", "ttps", "conti", "fivehands", "a variant", "ciau2019s hive", "attack kit", "hive trapelato", "leads", "threat alert", "million", "ransom payments", "u2013 active", "iocs", "rewterz", "u2013 hive", "november", "rewterz threat", "hive project", "october", "elf file", "virustotal", "xdr33", "trojan", "cia hive", "new backdoor", "urlhaus feed", "9rxd8gdj8", "pvbl1pdbmxc", "ttehg47bmx", "ohr0kszrhp4", "sigremoteadmin1", "analysis" ], "references": [ "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 163208, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NovatechThreatFeed", "id": "245623", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 34, "FileHash-MD5": 223, "FileHash-SHA1": 226, "FileHash-SHA256": 235, "email": 5, "URL": 8707, "domain": 3482, "hostname": 774 }, "indicator_count": 13686, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "974 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64b8f4e0b7008cc32a008d4f", "name": "Novatech Threat Feed", "description": "Large collection of Threats compiled for STIX integrations.", "modified": "2023-08-19T08:04:35.475000", "created": "2023-07-20T08:48:32.024000", "tags": [ "ipv4", "port scan", "indicator", "alienvault", "open threat", "sha1", "misp threat", "actor list", "identify", "frp tool", "volt typhoon", "pla unit", "group", "china", "united", "guard corps", "vulnerabilities", "data extortion", "disk encryption", "sha256", "cisa", "apt group", "fortinet", "mobile", "android", "url request", "exchange", "detection", "techniques", "cactus", "march", "fortinet vpn", "employs unique", "proxyshell", "log4j", "sonicwall", "proxylogon", "unit", "report", "cloud", "attack threats", "teamtnt", "december", "apache log4j2", "docker remote", "threats", "cve202329180", "psirt", "botnet list", "filter", "malware filter", "domains", "data", "list", "emerges", "malware", "horizon", "research", "cril", "trigona", "strain", "beeware", "vice society", "tale", "victim data", "exfiltration", "powershell", "ransomware", "lockbit team", "latest double", "extortion group", "cleaning", "bablock", "rorschach", "otx pulsenamean", "ransom", "delphi", "attacking", "how real", "lockbit", "macho", "macho binaries", "cofense", "latest ato", "ccsg asnas14061", "digitaloceanasn", "spread malware", "qbot banking", "trojan campaign", "emails", "qbot malware", "april", "germany", "argentina", "qakbot", "pinkslipbot", "cobalt strike", "ransomware gang", "continues", "golandbuildpe", "uses revamped", "fin8 uses", "backdoor", "generic trojan", "stopransomware", "otx pulsename", "us department", "health", "social security", "hive ransomware", "uac0050", "remcos program", "court", "kyiv", "team", "ukraine certua", "malicious java", "archive", "access", "polygot", "icedid malware", "cybereason", "iso file", "lnk file", "windows", "ttps", "conti", "fivehands", "a variant", "ciau2019s hive", "attack kit", "hive trapelato", "leads", "threat alert", "million", "ransom payments", "u2013 active", "iocs", "rewterz", "u2013 hive", "november", "rewterz threat", "hive project", "october", "elf file", "virustotal", "xdr33", "trojan", "cia hive", "new backdoor", "urlhaus feed", "9rxd8gdj8", "pvbl1pdbmxc", "ttehg47bmx", "ohr0kszrhp4", "sigremoteadmin1", "analysis" ], "references": [ "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NovatechThreatFeed", "id": "245623", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 34, "FileHash-MD5": 223, "FileHash-SHA1": 226, "FileHash-SHA256": 235, "email": 5, "URL": 8707, "domain": 3482, "hostname": 774 }, "indicator_count": 13686, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "974 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638650c73af5f40f7ba6977f", "name": "URLhaus feed IOCs - multiple malware families", "description": "https://urlhaus.abuse.ch/feeds/asn/22612/", "modified": "2022-12-29T18:06:00.139000", "created": "2022-11-29T18:34:47.361000", "tags": [ "emotetheodo", "dridex", "agentteslaexe", "azorultexe", "qakbot", "gozi", "icedid", "dridexopendir", "danabot", "heodo", "trickbot", "azorult", "hawkeye", "arkeistealer", "remcosrat", "agenttesla", "systembc", "kpotstealer", "darkrat", "troldesh", "quasarrat", "stealer", "formbook", "zloader", "phorpiex", "pony", "nanocore", "kpot", "raccoonstealer", "remcos", "loader", "qealler", "luminositylink", "hancitor", "nemty", "servhelper", "netwire", "gandcrab", "loki" ], "references": [ "https://urlhaus.abuse.ch/feeds/asn/22612/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Techronik", "id": "114546", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 14, "URL": 8676, "domain": 2891, "hostname": 334 }, "indicator_count": 11915, "is_author": false, "is_subscribing": null, "subscriber_count": 85, "modified_text": "1207 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "Research and Data Analysis", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://urlhaus.abuse.ch/feeds/asn/22612/", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "Tulach" ], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 8, "pulses": [ { "id": "6570a7fc464f9f56ac33a389", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "", "modified": "2023-12-06T16:57:32.030000", "created": "2023-12-06T16:57:32.030000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 3487, "domain": 3202, "CVE": 5, "FileHash-SHA256": 1943, "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 114, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a7e7daf278491d9f9eb4", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "", "modified": "2023-12-06T16:57:11.228000", "created": "2023-12-06T16:57:11.228000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 3487, "domain": 3202, "CVE": 5, "FileHash-SHA256": 1943, "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "652044fb2f28d46e91d29160", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "Packed. Miscellaneous Attacks. Hidden Users \nTarget: tsara brashears", "modified": "2023-11-05T14:05:48.545000", "created": "2023-10-06T17:33:47.403000", "tags": [ "ssl certificate", "whois whois", "iocs", "milum botnet", "army", "isp stuff", "whois record", "travel stuff", "misp", "threat roundup", "july", "apple", "password", "apple ios", "whois", "emotet", "powershell", "hacktool", "crypto", "pornhub", "tulach", "tsara", "camera", "connect", "tsara brashears", "brashears", "scanning_host", "trojan", "phishing", "afro", "june", "misc attack", "et tor", "known tor", "relayrouter", "exit", "node traffic", "http traffic", "suricata alerts", "event category", "description sid", "websma", "webabo", "cisco umbrella", "site", "safe site", "alexa top", "million", "malware", "alexa", "heur", "malicious site", "malicious url", "unsafe", "agent", "phishing", "riskware", "bank", "iframe", "downldr", "presenoker", "artemis", "genkryptik", "fuery", "wacatac", "azorult", "service", "runescape", "facebook", "download", "union", "team", "opencandy", "exploit", "mimikatz", "blacklist https", "a1mara" ], "references": [ "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "Research and Data Analysis", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8" ], "public": 1, "adversary": "Tulach", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1070.003", "name": "Clear Command History", "display_name": "T1070.003 - Clear Command History" }, { "id": "T1147", "name": "Hidden Users", "display_name": "T1147 - Hidden Users" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56, "FileHash-SHA256": 1943, "domain": 3202, "hostname": 3487, "CVE": 5 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 226, "modified_text": "896 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65204565ac1e8bce4de26df3", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "Packed. Miscellaneous Attacks. Hidden Users \nTarget: tsara brashears", "modified": "2023-11-05T14:05:48.545000", "created": "2023-10-06T17:35:33.618000", "tags": [ "ssl certificate", "whois whois", "iocs", "milum botnet", "army", "isp stuff", "whois record", "travel stuff", "misp", "threat roundup", "july", "apple", "password", "apple ios", "whois", "emotet", "powershell", "hacktool", "crypto", "pornhub", "tulach", "tsara", "camera", "connect", "tsara brashears", "brashears", "scanning_host", "trojan", "phishing", "afro", "june", "misc attack", "et tor", "known tor", "relayrouter", "exit", "node traffic", "http traffic", "suricata alerts", "event category", "description sid", "websma", "webabo", "cisco umbrella", "site", "safe site", "alexa top", "million", "malware", "alexa", "heur", "malicious site", "malicious url", "unsafe", "agent", "phishing", "riskware", "bank", "iframe", "downldr", "presenoker", "artemis", "genkryptik", "fuery", "wacatac", "azorult", "service", "runescape", "facebook", "download", "union", "team", "opencandy", "exploit", "mimikatz", "blacklist https", "a1mara" ], "references": [ "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "Research and Data Analysis", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8" ], "public": 1, "adversary": "Tulach", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1070.003", "name": "Clear Command History", "display_name": "T1070.003 - Clear Command History" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56, "FileHash-SHA256": 1943, "domain": 3202, "hostname": 3487, "CVE": 5 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 226, "modified_text": "896 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "653f1df9a7da086561b9897f", "name": "Hidden Users |Injection| Milum Botnet | Tulach Malware | Emotet", "description": "", "modified": "2023-11-05T14:05:48.545000", "created": "2023-10-30T03:07:37.963000", "tags": [ "ssl certificate", "whois whois", "iocs", "milum botnet", "army", "isp stuff", "whois record", "travel stuff", "misp", "threat roundup", "july", "apple", "password", "apple ios", "whois", "emotet", "powershell", "hacktool", "crypto", "pornhub", "tulach", "tsara", "camera", "connect", "tsara brashears", "brashears", "scanning_host", "trojan", "phishing", "afro", "june", "misc attack", "et tor", "known tor", "relayrouter", "exit", "node traffic", "http traffic", "suricata alerts", "event category", "description sid", "websma", "webabo", "cisco umbrella", "site", "safe site", "alexa top", "million", "malware", "alexa", "heur", "malicious site", "malicious url", "unsafe", "agent", "phishing", "riskware", "bank", "iframe", "downldr", "presenoker", "artemis", "genkryptik", "fuery", "wacatac", "azorult", "service", "runescape", "facebook", "download", "union", "team", "opencandy", "exploit", "mimikatz", "blacklist https", "a1mara" ], "references": [ "https://qvdcz.farmersdaughtersvirginia.com/sharecamera-search/19857150", "Research and Data Analysis", "https://www.hybrid-analysis.com/sample/9b6b166a36b69e296ba3516cfe2d1feb7945289b1583f71329f34d9a649c94d8" ], "public": 1, "adversary": "Tulach", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1070.003", "name": "Clear Command History", "display_name": "T1070.003 - Clear Command History" } ], "industries": [], "TLP": "white", "cloned_from": "65204565ac1e8bce4de26df3", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14072, "FileHash-MD5": 70, "FileHash-SHA1": 56, "FileHash-SHA256": 1943, "domain": 3202, "hostname": 3487, "CVE": 5 }, "indicator_count": 22835, "is_author": false, "is_subscribing": null, "subscriber_count": 218, "modified_text": "896 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64b8f4d80b0e4b622175ebd5", "name": "Novatech Threat Feed", "description": "Large collection of Threats compiled for STIX integrations.", "modified": "2023-08-19T08:04:35.475000", "created": "2023-07-20T08:48:24.069000", "tags": [ "ipv4", "port scan", "indicator", "alienvault", "open threat", "sha1", "misp threat", "actor list", "identify", "frp tool", "volt typhoon", "pla unit", "group", "china", "united", "guard corps", "vulnerabilities", "data extortion", "disk encryption", "sha256", "cisa", "apt group", "fortinet", "mobile", "android", "url request", "exchange", "detection", "techniques", "cactus", "march", "fortinet vpn", "employs unique", "proxyshell", "log4j", "sonicwall", "proxylogon", "unit", "report", "cloud", "attack threats", "teamtnt", "december", "apache log4j2", "docker remote", "threats", "cve202329180", "psirt", "botnet list", "filter", "malware filter", "domains", "data", "list", "emerges", "malware", "horizon", "research", "cril", "trigona", "strain", "beeware", "vice society", "tale", "victim data", "exfiltration", "powershell", "ransomware", "lockbit team", "latest double", "extortion group", "cleaning", "bablock", "rorschach", "otx pulsenamean", "ransom", "delphi", "attacking", "how real", "lockbit", "macho", "macho binaries", "cofense", "latest ato", "ccsg asnas14061", "digitaloceanasn", "spread malware", "qbot banking", "trojan campaign", "emails", "qbot malware", "april", "germany", "argentina", "qakbot", "pinkslipbot", "cobalt strike", "ransomware gang", "continues", "golandbuildpe", "uses revamped", "fin8 uses", "backdoor", "generic trojan", "stopransomware", "otx pulsename", "us department", "health", "social security", "hive ransomware", "uac0050", "remcos program", "court", "kyiv", "team", "ukraine certua", "malicious java", "archive", "access", "polygot", "icedid malware", "cybereason", "iso file", "lnk file", "windows", "ttps", "conti", "fivehands", "a variant", "ciau2019s hive", "attack kit", "hive trapelato", "leads", "threat alert", "million", "ransom payments", "u2013 active", "iocs", "rewterz", "u2013 hive", "november", "rewterz threat", "hive project", "october", "elf file", "virustotal", "xdr33", "trojan", "cia hive", "new backdoor", "urlhaus feed", "9rxd8gdj8", "pvbl1pdbmxc", "ttehg47bmx", "ohr0kszrhp4", "sigremoteadmin1", "analysis" ], "references": [ "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 163208, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NovatechThreatFeed", "id": "245623", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 34, "FileHash-MD5": 223, "FileHash-SHA1": 226, "FileHash-SHA256": 235, "email": 5, "URL": 8707, "domain": 3482, "hostname": 774 }, "indicator_count": 13686, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "974 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64b8f4e0b7008cc32a008d4f", "name": "Novatech Threat Feed", "description": "Large collection of Threats compiled for STIX integrations.", "modified": "2023-08-19T08:04:35.475000", "created": "2023-07-20T08:48:32.024000", "tags": [ "ipv4", "port scan", "indicator", "alienvault", "open threat", "sha1", "misp threat", "actor list", "identify", "frp tool", "volt typhoon", "pla unit", "group", "china", "united", "guard corps", "vulnerabilities", "data extortion", "disk encryption", "sha256", "cisa", "apt group", "fortinet", "mobile", "android", "url request", "exchange", "detection", "techniques", "cactus", "march", "fortinet vpn", "employs unique", "proxyshell", "log4j", "sonicwall", "proxylogon", "unit", "report", "cloud", "attack threats", "teamtnt", "december", "apache log4j2", "docker remote", "threats", "cve202329180", "psirt", "botnet list", "filter", "malware filter", "domains", "data", "list", "emerges", "malware", "horizon", "research", "cril", "trigona", "strain", "beeware", "vice society", "tale", "victim data", "exfiltration", "powershell", "ransomware", "lockbit team", "latest double", "extortion group", "cleaning", "bablock", "rorschach", "otx pulsenamean", "ransom", "delphi", "attacking", "how real", "lockbit", "macho", "macho binaries", "cofense", "latest ato", "ccsg asnas14061", "digitaloceanasn", "spread malware", "qbot banking", "trojan campaign", "emails", "qbot malware", "april", "germany", "argentina", "qakbot", "pinkslipbot", "cobalt strike", "ransomware gang", "continues", "golandbuildpe", "uses revamped", "fin8 uses", "backdoor", "generic trojan", "stopransomware", "otx pulsename", "us department", "health", "social security", "hive ransomware", "uac0050", "remcos program", "court", "kyiv", "team", "ukraine certua", "malicious java", "archive", "access", "polygot", "icedid malware", "cybereason", "iso file", "lnk file", "windows", "ttps", "conti", "fivehands", "a variant", "ciau2019s hive", "attack kit", "hive trapelato", "leads", "threat alert", "million", "ransom payments", "u2013 active", "iocs", "rewterz", "u2013 hive", "november", "rewterz threat", "hive project", "october", "elf file", "virustotal", "xdr33", "trojan", "cia hive", "new backdoor", "urlhaus feed", "9rxd8gdj8", "pvbl1pdbmxc", "ttehg47bmx", "ohr0kszrhp4", "sigremoteadmin1", "analysis" ], "references": [ "https://otx.alienvault.com/otxapi/pulses/64b85cf7e569e75ec395696c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0Yjg1Y2Y3ZTU2OWU3NWVjMzk1Njk2YyIsImNzdiJdLCJleHAiOjE2ODk5MjU0NDh9.OQ8AtbbcrzENc2m6bwyPQyJyZJsu3aSlNXCBwGVJaB8&format=csv", "https://otx.alienvault.com/pulse/6488e17e5b38aad62e392783", "https://otx.alienvault.com/pulse/647df94cade6a91f2f7185a3", "https://otx.alienvault.com/pulse/6459446e51e8c709f5b9ba99", "https://otx.alienvault.com/pulse/6328a57ec461f46ac6a1b985", "https://otx.alienvault.com/otxapi/pulses/647df94c950882207d03c2d0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjOTUwODgyMjA3ZDAzYzJkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDUyfQ.22bH0CciQD9VMzwcoravKfpF-WAGR8T8l15vvJq8NV8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6328a57ec461f46ac6a1b985/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzMjhhNTdlYzQ2MWY0NmFjNmExYjk4NSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MDgwfQ.PFo9rSoIPJVSkJXFWURYey8A3OUbssVOchWJh5Xi9rs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/622603f902b921bbbc9ab78d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMjYwM2Y5MDJiOTIxYmJiYzlhYjc4ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTE3fQ.jClDCc0MliUwhQ4Qib7O_Ej23bsHGzLq34A8LXbz5oo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6459446e51e8c709f5b9ba99/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0NTk0NDZlNTFlOGM3MDlmNWI5YmE5OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTQxfQ.vi3ZVOWL32HzqZRMWBPucDea4U2PD6yJb2QaPm5lF-Q&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/62ea7df481ecb7b1966c3e36/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyZWE3ZGY0ODFlY2I3YjE5NjZjM2UzNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTYzfQ.Iz1Lf2XXaTV5zhSciszsbV8eKJ09dZP0JNmehv_NYKk&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6213b203dd1fae0e1c1e389c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYyMTNiMjAzZGQxZmFlMGUxYzFlMzg5YyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MTg1fQ.jpPxQJgrUDUcn4s37djLT1ZKYnYMG6665oYVOByOtDw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/6488e17e5b38aad62e392783/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0ODhlMTdlNWIzOGFhZDYyZTM5Mjc4MyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MjUzfQ.1ddMjIWc5iLhP4qRG6Qhwsrs3VTccJsa5EwRqAcJ1dA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/647df94cade6a91f2f7185a3/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0N2RmOTRjYWRlNmE5MWYyZjcxODVhMyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mjg3fQ.KIAbBzSeZtxo7rQDXpoIjfJeShg40CHYp3FG8o6trXs&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b47f8cb603db3b79111a89/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3ZjhjYjYwM2RiM2I3OTExMWE4OSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2MzYwfQ.FJBYg1af8-c2CYfMgeQWhm6BnwDmgh7D3DTqFq1IxL8&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b4716072dffa38b11bfbe7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjQ3MTYwNzJkZmZhMzhiMTFiZmJlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Mzg2fQ.-2WL3r9weJIzGJYlTpxpcJcZzofdjM7i1KqiAvBHv5Y&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b08b009734df5ccdd377bf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjA4YjAwOTczNGRmNWNjZGQzNzdiZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDIwfQ.loAonIXFIlmaqxCC9JrjuCH1_TcH0WibuxX3Uuw-GdU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af399779cd57baa6c4fb86/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk3NzljZDU3YmFhNmM0ZmI4NiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDUxfQ.lriZjad__q4yyoq-TTC5-uyTG1HMBq_BShMUGMNAC4g&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64af3998874ce6c230ed5ecc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YWYzOTk4ODc0Y2U2YzIzMGVkNWVjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NDc1fQ.Lbbp_5-W4511P7u_DpeHFhiIOsy7tlkeFpwfwOYPpHU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fd0625328e35cba6d1ace/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZkMDYyNTMyOGUzNWNiYTZkMWFjZSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTYwfQ.2beuCr1juM0OQOLiB-nrQ9KnxcYHSbteP7y32_OP3uc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641833c2832a4f8000f27bff/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MTgzM2MyODMyYTRmODAwMGYyN2JmZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NTgzfQ.xAudwTXToFHBZsFnJdvjMQk7ueXknfVmRC7UDhfr7oA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643fa5ba6617a24a9707caa5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2ZhNWJhNjYxN2EyNGE5NzA3Y2FhNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjAzfQ.8NKdByhhAmkb9nkhcCbMb7mCHcTw6KXCkZxi-IiJe5E&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f91edc588fc6182a7d858/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y5MWVkYzU4OGZjNjE4MmE3ZDg1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjE5fQ.pP9qOy6Wo16dtb9Xyj_yO8ReYPqCxtOL_MmeyCpCNiU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f82f6780c857fbc5cedb5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y4MmY2NzgwYzg1N2ZiYzVjZWRiNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjM3fQ.b1x8REWcbq9Pgxhm07Wvu-cIpfOpY9bDXxl_W5NQrew&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f75ba5b3359ae372680cc/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2Y3NWJhNWIzMzU5YWUzNzI2ODBjYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjYwfQ.14nUOtdbXzyO5vRnpF7eUu4njUu6wM1ZTHzC4AsVfFo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f32323d4ac74efe3aaed0/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YzMjMyM2Q0YWM3NGVmZTNhYWVkMCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NjgxfQ.Em8XwPxhfRU_RbO351sxAr5M4BZ6G9NuhW65O7awTWA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643f00f554c143f52de70b31/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2YwMGY1NTRjMTQzZjUyZGU3MGIzMSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Njk4fQ.wF3OTclDkjSHoom04hQZ6-kB0EYYXbBndq_BuN2LxOo&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643efc7b9ca40532638571c5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VmYzdiOWNhNDA1MzI2Mzg1NzFjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzE3fQ.gsrZIxJmAAkLVl2h3aMH19_85H5Kg1TizGgEWmbyiKQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643eed3d1e43451363281e34/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2VlZDNkMWU0MzQ1MTM2MzI4MWUzNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2NzMzfQ.q0pJ-yGRU91EHs3hcJmcJmIsk2RCUPyr2R65CDn9CEg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e826d163d0b99c2baef29/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U4MjZkMTYzZDBiOTljMmJhZWYyOSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2Nzk1fQ.zfhL6lmvXFMKpp98aYxBQkNvyalVIKPPdWGKwp7SE_I&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643e6a3809de0b0f0e941324/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2U2YTM4MDlkZTBiMGYwZTk0MTMyNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODEzfQ.GieEGNHACyjNO0MRljBk93lKkK_SSK-7BmlZXlP2lSE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/643dd431ac3efe5772594c14/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0M2RkNDMxYWMzZWZlNTc3MjU5NGMxNCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODQwfQ.OEtL3L0HbnOOfbPWOMQ26vnLLLfvucXkwGVWjNIQmMc&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/641aa00df54830afc3822cf2/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MWFhMDBkZjU0ODMwYWZjMzgyMmNmMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2ODU2fQ.Alh1Fii54_w0N99C1_7i65TUqGblYkXQSk_woQv-_78&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64b7f2b8e354c04b1970767d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0YjdmMmI4ZTM1NGMwNGIxOTcwNzY3ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI2OTEwfQ.0FZXcYWY6NSTrBIP0gl_WMBj4MGQ_555t2kksOHucrE&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/642c283b29591e0a4d05b9bd/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MmMyODNiMjk1OTFlMGE0ZDA1YjliZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzIzfQ.-kYlLQ7W3qFIr_cCbA6Gym_mXjV_G82No3ACGhFWFTw&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/64013e084d98371cc5167de7/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjY0MDEzZTA4NGQ5ODM3MWNjNTE2N2RlNyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzQ0fQ.UQYAjjr43A7ZUx6vSAof23t_nM4GQ-_qv6Lt5PueQ2A&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63fc6cccc04b8e8499879997/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZmM2Y2NjYzA0YjhlODQ5OTg3OTk5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4NzY5fQ.fan0q03Zi1faAAwqQllsPpNIzCALGEDEomDxbLvAZA4&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63f66d82c59d14ba6b3c2a58/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzZjY2ZDgyYzU5ZDE0YmE2YjNjMmE1OCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4Nzg3fQ.xOGqjT6aiMpy343EJe5utReKUQsEMdFfnyIUPQVu5PA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c4fbc18cda5175bfc6e697/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzRmYmMxOGNkYTUxNzViZmM2ZTY5NyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODA1fQ.rtw-w-uwG6kv4wduA26bNZDkoLf7hk0u4XLW4muWum0&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63c081f53c4bb49948f3dc06/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYzA4MWY1M2M0YmI0OTk0OGYzZGMwNiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODIzfQ.khmvBnSFuRPZ9T_a1ZFx6HTbXxW7Y-68esiE-X0ejiY&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63be6fdae2bff6bb6aba065d/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmU2ZmRhZTJiZmY2YmI2YWJhMDY1ZCIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODQyfQ.D_R9Snhua2rk-gEHDHIi7GXle5HVZqsQFAPmFNKL4bQ&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bf16069eec5ba72ea48dc5/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmYxNjA2OWVlYzViYTcyZWE0OGRjNSIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODU4fQ.NPxHZDgPCkaNJ5iKKnO9aaYnvSfQPfJxTVlvHBasGIA&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638e0a49ef2cca67cbee1d02/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzOGUwYTQ5ZWYyY2NhNjdjYmVlMWQwMiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4ODgyfQ.YVtGHKdsypTAOaoDiDrhWJ6XQtgZwOg1mbsWfiB9xmU&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/63bbe3905bb7e1f36be696cf/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzYmJlMzkwNWJiN2UxZjM2YmU2OTZjZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTM3fQ.LTMAppyGvbMoSg4ERmXu8DtMEUO5SX7IzSZT_li001w&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/638650c73af5f40f7ba6977f/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzODY1MGM3M2FmNWY0MGY3YmE2OTc3ZiIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTY0fQ.A3hLcrLRX8BL0P29Jbitl0H2mgefEUEXUX0WaCJnkwg&format=stix2.1", "https://otx.alienvault.com/otxapi/pulses/637fb0c63c7b1029e6fbdd1c/export/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Ik5vdmF0ZWNoVGhyZWF0RmVlZCIsInZhbHVlIjpbIjYzN2ZiMGM2M2M3YjEwMjllNmZiZGQxYyIsInN0aXgyLjEiXSwiZXhwIjoxNjg5OTI4OTg2fQ.3lc4PO31SoiF0XPigwv0VkJYIJIGs52PubNN3KHLQKE&format=stix2.1" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "NovatechThreatFeed", "id": "245623", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 34, "FileHash-MD5": 223, "FileHash-SHA1": 226, "FileHash-SHA256": 235, "email": 5, "URL": 8707, "domain": 3482, "hostname": 774 }, "indicator_count": 13686, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "974 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638650c73af5f40f7ba6977f", "name": "URLhaus feed IOCs - multiple malware families", "description": "https://urlhaus.abuse.ch/feeds/asn/22612/", "modified": "2022-12-29T18:06:00.139000", "created": "2022-11-29T18:34:47.361000", "tags": [ "emotetheodo", "dridex", "agentteslaexe", "azorultexe", "qakbot", "gozi", "icedid", "dridexopendir", "danabot", "heodo", "trickbot", "azorult", "hawkeye", "arkeistealer", "remcosrat", "agenttesla", "systembc", "kpotstealer", "darkrat", "troldesh", "quasarrat", "stealer", "formbook", "zloader", "phorpiex", "pony", "nanocore", "kpot", "raccoonstealer", "remcos", "loader", "qealler", "luminositylink", "hancitor", "nemty", "servhelper", "netwire", "gandcrab", "loki" ], "references": [ "https://urlhaus.abuse.ch/feeds/asn/22612/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Techronik", "id": "114546", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 14, "URL": 8676, "domain": 2891, "hostname": 334 }, "indicator_count": 11915, "is_author": false, "is_subscribing": null, "subscriber_count": 85, "modified_text": "1207 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "techsystembot.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "techsystembot.com", "found": true, "verdict": "malicious", "url_count": 1, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "https://techsystembot.com/lta/index.php?qbot.zip", "status": "offline", "threat": "malware_download", "date_added": "2022-11-14", "tags": [ "BB06", "HK57", "iso", "Qakbot", "qbot", "Quakbot", "TR", "zip" ] } ], "error": null }, "from_cache": true, "_cached_at": 1776645609.2719052 }