{ "type": "Domain", "indicator": "trackerpdfconnect.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/trackerpdfconnect.com", "alexa": "http://www.alexa.com/siteinfo/trackerpdfconnect.com", "indicator": "trackerpdfconnect.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3450646947, "indicator": "trackerpdfconnect.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 49, "pulses": [ { "id": "68cf51e3b271cc64409972bf", "name": "InQuest - 20-09-2025", "description": "", "modified": "2025-10-21T01:01:14.281000", "created": "2025-09-21T01:16:19.455000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 75, "URL": 295, "FileHash-SHA256": 283, "domain": 84, "FileHash-SHA1": 9 }, "indicator_count": 746, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "181 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c57516085248829533f7c8", "name": "InQuest - 12-09-2025", "description": "", "modified": "2025-10-13T13:27:11.277000", "created": "2025-09-13T13:43:50.865000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 198, "FileHash-SHA256": 327, "domain": 42, "FileHash-SHA1": 19, "FileHash-MD5": 6 }, "indicator_count": 627, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "189 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c36db4f1c3434d9bb73bac", "name": "InQuest - 11-09-2025", "description": "", "modified": "2025-10-12T00:08:44.048000", "created": "2025-09-12T00:47:48.876000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 14, "hostname": 38, "URL": 203, "FileHash-SHA256": 243, "domain": 59, "FileHash-MD5": 14 }, "indicator_count": 571, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "190 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68b6379553e9978bfcf11f19", "name": "InQuest - 01-09-2025", "description": "", "modified": "2025-10-02T00:00:16.307000", "created": "2025-09-02T00:17:25.854000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 60, "URL": 240, "FileHash-SHA256": 442, "domain": 56, "FileHash-MD5": 4, "FileHash-SHA1": 2 }, "indicator_count": 804, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "200 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68b0f44fdd529f56acecee2a", "name": "InQuest - 28-08-2025", "description": "", "modified": "2025-09-28T00:00:13.359000", "created": "2025-08-29T00:29:03.134000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "hostname": 49, "URL": 250, "domain": 50, "FileHash-SHA256": 188, "FileHash-MD5": 1 }, "indicator_count": 554, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "204 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68a7b2cd34ee8102192296ef", "name": "InQuest - 21-08-2025", "description": "", "modified": "2025-09-20T23:03:41.245000", "created": "2025-08-21T23:59:09.653000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 30, "URL": 121, "domain": 21, "FileHash-SHA256": 182, "FileHash-SHA1": 8, "FileHash-MD5": 48 }, "indicator_count": 410, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "211 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "687f143a967e1e3a07d87b83", "name": "InQuest - 21-07-2025", "description": "", "modified": "2025-08-21T04:03:37.017000", "created": "2025-07-22T04:31:54.502000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 38, "URL": 253, "FileHash-SHA256": 229, "domain": 45, "FileHash-SHA1": 42, "FileHash-MD5": 2 }, "indicator_count": 609, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "242 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68549fb1f50b3ff0a6a57aad", "name": "InQuest - 19-06-2025", "description": "", "modified": "2025-07-19T23:05:44.525000", "created": "2025-06-19T23:39:29.412000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 50, "URL": 218, "FileHash-SHA256": 437, "domain": 31, "FileHash-SHA1": 11, "FileHash-MD5": 10 }, "indicator_count": 757, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "274 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "682e68a1bc32fdebbbef1623", "name": "InQuest - 21-05-2025", "description": "", "modified": "2025-06-20T23:02:09.595000", "created": "2025-05-21T23:58:25.183000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 35, "URL": 181, "FileHash-SHA1": 16, "FileHash-MD5": 11, "FileHash-SHA256": 350, "hostname": 56 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "303 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68100df3c4760f1b14583b3a", "name": "InQuest - 28-04-2025", "description": "", "modified": "2025-05-28T23:03:39.998000", "created": "2025-04-28T23:23:31.385000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 52, "URL": 273, "FileHash-SHA256": 333, "domain": 46, "FileHash-SHA1": 15 }, "indicator_count": 719, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "326 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "680ebd62349ae90389420903", "name": "InQuest - 27-04-2025", "description": "", "modified": "2025-05-27T23:00:18.986000", "created": "2025-04-27T23:27:30.149000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 53, "URL": 265, "FileHash-SHA1": 15, "domain": 52, "FileHash-SHA256": 282 }, "indicator_count": 667, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "327 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "680d6c39d86ca93db47ad6f7", "name": "InQuest - 26-04-2025", "description": "", "modified": "2025-05-26T23:01:43.708000", "created": "2025-04-26T23:28:57.929000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 51, "URL": 267, "domain": 44, "FileHash-SHA1": 12, "FileHash-SHA256": 264, "FileHash-MD5": 13 }, "indicator_count": 651, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "328 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67f855b49fe2aa5450f5d2e7", "name": "InQuest - 10-04-2025", "description": "", "modified": "2025-05-10T23:02:11.501000", "created": "2025-04-10T23:35:16.302000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 117, "URL": 540, "FileHash-SHA256": 838, "FileHash-SHA1": 26, "hostname": 139, "FileHash-MD5": 52 }, "indicator_count": 1712, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "344 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67f70374d85f9762c3ad56c2", "name": "InQuest - 09-04-2025", "description": "", "modified": "2025-05-09T23:08:55.551000", "created": "2025-04-09T23:32:04.566000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 57, "domain": 142, "URL": 529, "FileHash-SHA256": 826, "hostname": 120, "FileHash-SHA1": 23 }, "indicator_count": 1697, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "345 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67f5b0da593113fca17f4f10", "name": "InQuest - 08-04-2025", "description": "", "modified": "2025-05-08T23:02:05.353000", "created": "2025-04-08T23:27:22.966000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 25, "domain": 149, "URL": 543, "hostname": 113, "FileHash-SHA256": 666, "FileHash-MD5": 55 }, "indicator_count": 1551, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "346 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "677487c1b8986109eaf04bab", "name": "InQuest - 31-12-2024", "description": "", "modified": "2025-01-31T00:03:05.579000", "created": "2025-01-01T00:09:37.391000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 624, "FileHash-SHA256": 653, "hostname": 95, "domain": 158, "FileHash-SHA1": 22, "FileHash-MD5": 67 }, "indicator_count": 1619, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "444 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67733763e2dcce4b15468132", "name": "InQuest - 30-12-2024", "description": "", "modified": "2025-01-30T00:00:18.927000", "created": "2024-12-31T00:14:27.442000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 20, "URL": 579, "FileHash-SHA256": 719, "domain": 131, "hostname": 88, "FileHash-MD5": 27 }, "indicator_count": 1564, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "445 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6771e4af935a0bd51ecffcb7", "name": "InQuest - 29-12-2024", "description": "", "modified": "2025-01-29T00:00:31.366000", "created": "2024-12-30T00:09:19.061000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 532, "FileHash-SHA256": 741, "domain": 106, "hostname": 80, "FileHash-SHA1": 21, "FileHash-MD5": 27 }, "indicator_count": 1507, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "446 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "676f419c67996f920882a466", "name": "InQuest - 27-12-2024", "description": "", "modified": "2025-01-27T00:04:22.341000", "created": "2024-12-28T00:09:00.491000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 467, "FileHash-SHA256": 656, "FileHash-SHA1": 24, "domain": 121, "hostname": 81, "FileHash-MD5": 27 }, "indicator_count": 1376, "is_author": false, "is_subscribing": null, "subscriber_count": 1605, "modified_text": "448 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "676defce21dbf05baf3f1923", "name": "InQuest - 26-12-2024", "description": "", "modified": "2025-01-26T00:03:47.506000", "created": "2024-12-27T00:07:42.355000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 480, "FileHash-SHA256": 732, "domain": 111, "FileHash-SHA1": 26, "hostname": 90, "FileHash-MD5": 25 }, "indicator_count": 1464, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "449 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "676c9e8f14ad2a56a25ab2cd", "name": "InQuest - 25-12-2024", "description": "", "modified": "2025-01-25T00:00:03.360000", "created": "2024-12-26T00:08:47.821000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 18, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 444, "FileHash-SHA256": 809, "FileHash-MD5": 25, "domain": 115, "hostname": 115, "FileHash-SHA1": 22 }, "indicator_count": 1530, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "450 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "676b4cc20646d55cf5087563", "name": "InQuest - 24-12-2024", "description": "", "modified": "2025-01-24T00:00:38.344000", "created": "2024-12-25T00:07:28.562000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 574, "FileHash-SHA256": 773, "FileHash-MD5": 26, "domain": 113, "hostname": 120, "FileHash-SHA1": 22 }, "indicator_count": 1628, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "451 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6769fb2762335b75a85bb003", "name": "InQuest - 23-12-2024", "description": "", "modified": "2025-01-23T00:01:07.834000", "created": "2024-12-24T00:07:03.253000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 597, "FileHash-SHA1": 35, "FileHash-SHA256": 799, "domain": 109, "FileHash-MD5": 66, "hostname": 111 }, "indicator_count": 1717, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "452 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "676606b553a8a1195438ea52", "name": "InQuest - 20-12-2024", "description": "", "modified": "2025-01-20T00:01:24.271000", "created": "2024-12-21T00:07:17.278000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 415, "FileHash-SHA256": 701, "FileHash-SHA1": 30, "domain": 126, "FileHash-MD5": 27, "hostname": 96 }, "indicator_count": 1395, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "455 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "675ccc5c1ce05c14d502d25b", "name": "InQuest - 13-12-2024", "description": "", "modified": "2025-01-13T00:04:50.992000", "created": "2024-12-14T00:07:56.101000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 543, "FileHash-SHA256": 876, "FileHash-SHA1": 27, "domain": 160, "hostname": 90, "FileHash-MD5": 25 }, "indicator_count": 1721, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "462 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "675b7a8d715bea8dae799800", "name": "InQuest - 12-12-2024", "description": "", "modified": "2025-01-12T00:06:37.933000", "created": "2024-12-13T00:06:37.316000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 528, "FileHash-SHA256": 884, "FileHash-MD5": 23, "FileHash-SHA1": 26, "domain": 174, "hostname": 85 }, "indicator_count": 1720, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "463 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "675a291c4db55758a6c9939f", "name": "InQuest - 11-12-2024", "description": "", "modified": "2025-01-11T00:05:21.483000", "created": "2024-12-12T00:06:52.807000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 486, "FileHash-SHA256": 791, "domain": 169, "hostname": 73, "FileHash-SHA1": 25, "FileHash-MD5": 22 }, "indicator_count": 1566, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "464 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6758d6b537b2a55149ef62d8", "name": "InQuest - 10-12-2024", "description": "", "modified": "2025-01-10T00:01:00.333000", "created": "2024-12-11T00:03:01.699000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 477, "FileHash-SHA256": 774, "FileHash-SHA1": 25, "domain": 170, "hostname": 92, "FileHash-MD5": 22 }, "indicator_count": 1560, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "465 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6757868d091fe41a5f4eb7f7", "name": "InQuest - 09-12-2024", "description": "", "modified": "2025-01-09T00:00:38.235000", "created": "2024-12-10T00:08:45.010000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 662, "domain": 158, "URL": 439, "FileHash-MD5": 9, "hostname": 90, "FileHash-SHA1": 19 }, "indicator_count": 1377, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "466 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6756344c5a91b110c510ec07", "name": "InQuest - 08-12-2024", "description": "", "modified": "2025-01-08T00:04:53.735000", "created": "2024-12-09T00:05:32.432000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 157, "URL": 431, "FileHash-MD5": 9, "hostname": 86, "FileHash-SHA256": 608, "FileHash-SHA1": 14 }, "indicator_count": 1305, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "467 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6750ef0b094398caed24334d", "name": "InQuest - 04-12-2024", "description": "", "modified": "2025-01-06T23:11:01.995000", "created": "2024-12-05T00:08:43.209000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 798, "FileHash-MD5": 47, "hostname": 68, "URL": 322, "domain": 69, "FileHash-SHA1": 27 }, "indicator_count": 1331, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "468 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "674f9ce1718136e15df53b91", "name": "InQuest - 03-12-2024", "description": "", "modified": "2025-01-06T23:11:01.995000", "created": "2024-12-04T00:05:53.926000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 799, "URL": 378, "domain": 76, "hostname": 82, "FileHash-SHA1": 27, "FileHash-MD5": 47 }, "indicator_count": 1409, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "468 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "674e4ba5d0ce7a54e0ebb0d7", "name": "InQuest - 02-12-2024", "description": "", "modified": "2025-01-02T00:01:57.506000", "created": "2024-12-03T00:07:01.241000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 744, "URL": 362, "domain": 78, "hostname": 70, "FileHash-MD5": 47, "FileHash-SHA1": 16 }, "indicator_count": 1317, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "473 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "674cfa1081611607db7aadc5", "name": "InQuest - 01-12-2024", "description": "", "modified": "2025-01-01T00:02:25.701000", "created": "2024-12-02T00:06:40.854000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 490, "FileHash-SHA256": 535, "FileHash-MD5": 7, "hostname": 81, "domain": 91, "FileHash-SHA1": 30 }, "indicator_count": 1234, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "474 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "674ba835f72fdcb245b9e223", "name": "InQuest - 30-11-2024", "description": "", "modified": "2024-12-31T00:04:02.797000", "created": "2024-12-01T00:05:09.693000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 484, "domain": 81, "FileHash-SHA256": 560, "hostname": 78, "FileHash-MD5": 2, "FileHash-SHA1": 28 }, "indicator_count": 1233, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "475 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65fe1df5960b2b713030f1ef", "name": "InQuest - 22-03-2024", "description": "", "modified": "2024-04-22T00:00:57.561000", "created": "2024-03-23T00:10:29.642000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "URL": 670, "FileHash-SHA256": 1011, "hostname": 132, "domain": 182, "FileHash-SHA1": 19 }, "indicator_count": 2023, "is_author": false, "is_subscribing": null, "subscriber_count": 1605, "modified_text": "728 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65fccc7a3a18d3ba83fd0b18", "name": "InQuest - 21-03-2024", "description": "", "modified": "2024-04-21T00:00:20.716000", "created": "2024-03-22T00:10:34.733000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 17, "FileHash-MD5": 80, "URL": 467, "hostname": 99, "domain": 79, "FileHash-SHA256": 445 }, "indicator_count": 1187, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "729 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65f8d83b34c59648564330b4", "name": "InQuest - 18-03-2024", "description": "", "modified": "2024-04-18T00:00:00.444000", "created": "2024-03-19T00:11:39.370000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "FileHash-MD5": 78, "URL": 476, "hostname": 105, "domain": 80, "FileHash-SHA256": 444 }, "indicator_count": 1199, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "732 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65ef9d82ec84f478f9d4d4dd", "name": "InQuest - 11-03-2024", "description": "", "modified": "2024-04-11T00:00:37.934000", "created": "2024-03-12T00:10:42.546000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 17, "FileHash-MD5": 77, "URL": 514, "hostname": 97, "domain": 118, "FileHash-SHA256": 432 }, "indicator_count": 1255, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "739 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65eba7b2dc1f080455cb7e26", "name": "InQuest - 08-03-2024", "description": "", "modified": "2024-04-08T00:01:33.958000", "created": "2024-03-09T00:05:06.345000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 17, "FileHash-MD5": 76, "URL": 500, "hostname": 103, "domain": 96, "FileHash-SHA256": 436 }, "indicator_count": 1228, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "742 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65ea5a0e004ee52e83065b1d", "name": "InQuest - 07-03-2024", "description": "", "modified": "2024-04-07T00:02:33.847000", "created": "2024-03-08T00:21:34.326000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 30, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 17, "FileHash-MD5": 76, "URL": 501, "hostname": 98, "domain": 87, "FileHash-SHA256": 436 }, "indicator_count": 1215, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "743 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65e908574f3c7e97f980304b", "name": "InQuest - 06-03-2024", "description": "", "modified": "2024-04-06T00:05:19.883000", "created": "2024-03-07T00:20:39.986000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 34, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 951, "FileHash-SHA1": 45, "FileHash-MD5": 67, "hostname": 157, "FileHash-SHA256": 961, "domain": 236 }, "indicator_count": 2417, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "744 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65e66523ef1445c7a5f85bea", "name": "InQuest - 04-03-2024", "description": "", "modified": "2024-04-04T00:00:30.517000", "created": "2024-03-05T00:19:47.841000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 576, "FileHash-SHA256": 866, "hostname": 116, "domain": 149, "FileHash-SHA1": 15, "FileHash-MD5": 7 }, "indicator_count": 1729, "is_author": false, "is_subscribing": null, "subscriber_count": 1604, "modified_text": "746 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65e2719c1dc6aea056d0a025", "name": "InQuest - 01-03-2024", "description": "", "modified": "2024-04-01T00:00:42.552000", "created": "2024-03-02T00:23:56.467000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "FileHash-MD5": 78, "URL": 489, "hostname": 102, "domain": 82, "FileHash-SHA256": 453 }, "indicator_count": 1220, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "749 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65de7d2eed4cceb4d654bf89", "name": "InQuest - 27-02-2024", "description": "", "modified": "2024-03-29T00:00:48.199000", "created": "2024-02-28T00:24:14.056000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 18, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "FileHash-MD5": 77, "URL": 477, "hostname": 100, "domain": 79, "FileHash-SHA256": 440 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 1604, "modified_text": "752 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "628492d8e48a23476886f56d", "name": "NewDom-3-20220518", "description": "ICANN-Dom", "modified": "2022-07-02T00:05:39.094000", "created": "2022-05-18T06:31:52.495000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 201, "modified_text": "1388 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "62b5222ba4764f566054e84d", "name": "Hydra Android \u6076\u610f\u8f6f\u4ef6\u901a\u8fc7 Google Play \u5546\u5e97\u8fdb\u884c\u5206\u53d1", "description": "\u8fd1\u671f\uff0c\u5b89\u5168\u7814\u7a76\u4eba\u5458\u5728Google Play \u5546\u5e97\u53d1\u73b0\u4e86 Android \u6076\u610f\u8f6f\u4ef6\u53d8\u79cd\uff0c\u53d8\u79cd\u4f5c\u4e3a\u6076\u610f\u4e0b\u8f7d\u5668\u5e76\u4e0b\u8f7d Hydra \u94f6\u884c\u6728\u9a6c\u3002Hydra Android\u94f6\u884c\u6728\u9a6c\u4e8e2019\u5e74\u521d\u88ab\u53d1\u73b0\uff0c\u8be5\u6076\u610f\u8f6f\u4ef6\u76ee\u524d\u4f2a\u88c5\u6210 Document Manager \u5e94\u7528\u7a0b\u5e8f\uff0c\u5e76\u5728\u77ed\u65f6\u95f4\u5185\u83b7\u5f97\u4e86\u8d85\u8fc7 10,000 \u6b21\u4e0b\u8f7d\u3002\u6839\u636e Play \u5546\u5e97\u7edf\u8ba1\uff0c\u8be5\u5e94\u7528\u4e8e 2022 \u5e74 5 \u6708 30 \u65e5\u66f4\u65b0\uff0c\u5e76\u4e8e 2022 \u5e74 6 \u6708 3 \u65e5\u53d1\u5e03\u3002\u7528\u6237\u5b89\u88c5\u6076\u610f\u7684\u5e94\u7528\u8f6f\u4ef6\u540e\uff0c\u8f6f\u4ef6\u4f1a\u663e\u793a\u4e00\u4e2a\u865a\u5047\u7684\u66f4\u65b0\u5bf9\u8bdd\u6846\uff0c\u8bf1\u4f7f\u7528\u6237\u6388\u4e88\u4ece\u672a\u77e5\u6765\u6e90\u4e0b\u8f7d Hydra \u6076\u610f\u8f6f\u4ef6\u7684\u6743\u9650\u3002", "modified": "2022-06-24T02:32:11.677000", "created": "2022-06-24T02:32:11.677000", "tags": [ "hydra", "hydra banking", "android banking", "play store", "hydra malware", "banking trojan", "apk file", "cyble research", "labs", "trojan", "columbia", "hydra android", "june", "malware", "april", "protect", "HotSpot" ], "references": [ "https://blog.cyble.com/2022/06/13/hydra-android-malware-distributed-via-play-store/" ], "public": 1, "adversary": "", "targeted_countries": [ "India", "Singapore", "Australia", "Georgia" ], "malware_families": [ { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Android Banking", "display_name": "Android Banking", "target": null }, { "id": "Hydra Banking", "display_name": "Hydra Banking", "target": null } ], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1090", "name": "Proxy", "display_name": "T1090 - Proxy" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1406", "name": "Obfuscated Files or Information", "display_name": "T1406 - Obfuscated Files or Information" }, { "id": "T1409", "name": "Access Stored Application Data", "display_name": "T1409 - Access Stored Application Data" }, { "id": "T1412", "name": "Capture SMS Messages", "display_name": "T1412 - Capture SMS Messages" }, { "id": "T1415", "name": "URL Scheme Hijacking", "display_name": "T1415 - URL Scheme Hijacking" }, { "id": "T1421", "name": "System Network Connections Discovery", "display_name": "T1421 - System Network Connections Discovery" }, { "id": "T1444", "name": "Masquerade as Legitimate Application", "display_name": "T1444 - Masquerade as Legitimate Application" }, { "id": "T1447", "name": "Delete Device Data", "display_name": "T1447 - Delete Device Data" }, { "id": "T1571", "name": "Non-Standard Port", "display_name": "T1571 - Non-Standard Port" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "chuanjia_yi", "id": "176066", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 6, "FileHash-MD5": 2, "FileHash-SHA1": 2, "FileHash-SHA256": 2, "domain": 5 }, "indicator_count": 17, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "1396 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "62a9a84ae0c6f308d9f380f5", "name": "Hydra IOCs", "description": "A full list of hashes for the Hydra malware, which has infected more than 100,000 people, has been released.. and the following details have been shared by BBC Radio 4's Newsnight.", "modified": "2022-06-15T09:37:14.088000", "created": "2022-06-15T09:37:14.088000", "tags": [ "apk file", "hydra malware", "sha256 hash", "sha1 hash", "md5 hash", "url c", "c server", "url hydra", "downloader url", "url tor" ], "references": [ "https://blog.cyble.com/2022/06/13/hydra-android-malware-distributed-via-play-store/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "brazen.fox.thirteen", "id": "155136", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 5, "FileHash-MD5": 2, "FileHash-SHA1": 2, "FileHash-SHA256": 2, "domain": 5 }, "indicator_count": 16, "is_author": false, "is_subscribing": null, "subscriber_count": 128, "modified_text": "1405 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "62a887a741be7279e61240d8", "name": "Hydra Android Malware Distributed Via Play Store", "description": "A security researcher from Cyble Research Labs has identified a variant of the Hydra Banking Trojan that has been circulating on the Google Play Store since June 13, 2022, and is targeting Columbia, South America.", "modified": "2022-06-14T13:05:43.131000", "created": "2022-06-14T13:05:43.131000", "tags": [ "hydra", "hydra banking", "android banking", "play store", "hydra malware", "banking trojan", "apk file", "cyble research", "labs", "trojan", "columbia", "hydra android", "june", "malware", "april", "protect" ], "references": [ "https://blog.cyble.com/2022/06/13/hydra-android-malware-distributed-via-play-store/" ], "public": 1, "adversary": "", "targeted_countries": [ "India", "Singapore", "Australia", "Georgia" ], "malware_families": [ { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Android Banking", "display_name": "Android Banking", "target": null }, { "id": "Hydra Banking", "display_name": "Hydra Banking", "target": null } ], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1090", "name": "Proxy", "display_name": "T1090 - Proxy" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1406", "name": "Obfuscated Files or Information", "display_name": "T1406 - Obfuscated Files or Information" }, { "id": "T1409", "name": "Access Stored Application Data", "display_name": "T1409 - Access Stored Application Data" }, { "id": "T1412", "name": "Capture SMS Messages", "display_name": "T1412 - Capture SMS Messages" }, { "id": "T1415", "name": "URL Scheme Hijacking", "display_name": "T1415 - URL Scheme Hijacking" }, { "id": "T1421", "name": "System Network Connections Discovery", "display_name": "T1421 - System Network Connections Discovery" }, { "id": "T1444", "name": "Masquerade as Legitimate Application", "display_name": "T1444 - Masquerade as Legitimate Application" }, { "id": "T1447", "name": "Delete Device Data", "display_name": "T1447 - Delete Device Data" }, { "id": "T1571", "name": "Non-Standard Port", "display_name": "T1571 - Non-Standard Port" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "mohdrennis", "id": "138092", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 6, "FileHash-MD5": 2, "FileHash-SHA1": 2, "FileHash-SHA256": 2, "domain": 5 }, "indicator_count": 17, "is_author": false, "is_subscribing": null, "subscriber_count": 354, "modified_text": "1406 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://labs.inquest.net/iocdb", "https://blog.cyble.com/2022/06/13/hydra-android-malware-distributed-via-play-store/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [ "Android banking", "Hydra banking", "Hydra" ], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 49, "pulses": [ { "id": "68cf51e3b271cc64409972bf", "name": "InQuest - 20-09-2025", "description": "", "modified": "2025-10-21T01:01:14.281000", "created": "2025-09-21T01:16:19.455000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 75, "URL": 295, "FileHash-SHA256": 283, "domain": 84, "FileHash-SHA1": 9 }, "indicator_count": 746, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "181 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c57516085248829533f7c8", "name": "InQuest - 12-09-2025", "description": "", "modified": "2025-10-13T13:27:11.277000", "created": "2025-09-13T13:43:50.865000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 198, "FileHash-SHA256": 327, "domain": 42, "FileHash-SHA1": 19, "FileHash-MD5": 6 }, "indicator_count": 627, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "189 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c36db4f1c3434d9bb73bac", "name": "InQuest - 11-09-2025", "description": "", "modified": "2025-10-12T00:08:44.048000", "created": "2025-09-12T00:47:48.876000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 14, "hostname": 38, "URL": 203, "FileHash-SHA256": 243, "domain": 59, "FileHash-MD5": 14 }, "indicator_count": 571, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "190 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68b6379553e9978bfcf11f19", "name": "InQuest - 01-09-2025", "description": "", "modified": "2025-10-02T00:00:16.307000", "created": "2025-09-02T00:17:25.854000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 60, "URL": 240, "FileHash-SHA256": 442, "domain": 56, "FileHash-MD5": 4, "FileHash-SHA1": 2 }, "indicator_count": 804, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "200 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68b0f44fdd529f56acecee2a", "name": "InQuest - 28-08-2025", "description": "", "modified": "2025-09-28T00:00:13.359000", "created": "2025-08-29T00:29:03.134000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 16, "hostname": 49, "URL": 250, "domain": 50, "FileHash-SHA256": 188, "FileHash-MD5": 1 }, "indicator_count": 554, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "204 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68a7b2cd34ee8102192296ef", "name": "InQuest - 21-08-2025", "description": "", "modified": "2025-09-20T23:03:41.245000", "created": "2025-08-21T23:59:09.653000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 30, "URL": 121, "domain": 21, "FileHash-SHA256": 182, "FileHash-SHA1": 8, "FileHash-MD5": 48 }, "indicator_count": 410, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "211 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "687f143a967e1e3a07d87b83", "name": "InQuest - 21-07-2025", "description": "", "modified": "2025-08-21T04:03:37.017000", "created": "2025-07-22T04:31:54.502000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 38, "URL": 253, "FileHash-SHA256": 229, "domain": 45, "FileHash-SHA1": 42, "FileHash-MD5": 2 }, "indicator_count": 609, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "242 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68549fb1f50b3ff0a6a57aad", "name": "InQuest - 19-06-2025", "description": "", "modified": "2025-07-19T23:05:44.525000", "created": "2025-06-19T23:39:29.412000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 27, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 50, "URL": 218, "FileHash-SHA256": 437, "domain": 31, "FileHash-SHA1": 11, "FileHash-MD5": 10 }, "indicator_count": 757, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "274 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "682e68a1bc32fdebbbef1623", "name": "InQuest - 21-05-2025", "description": "", "modified": "2025-06-20T23:02:09.595000", "created": "2025-05-21T23:58:25.183000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 35, "URL": 181, "FileHash-SHA1": 16, "FileHash-MD5": 11, "FileHash-SHA256": 350, "hostname": 56 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "303 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68100df3c4760f1b14583b3a", "name": "InQuest - 28-04-2025", "description": "", "modified": "2025-05-28T23:03:39.998000", "created": "2025-04-28T23:23:31.385000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 52, "URL": 273, "FileHash-SHA256": 333, "domain": 46, "FileHash-SHA1": 15 }, "indicator_count": 719, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "326 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "trackerpdfconnect.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "trackerpdfconnect.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1776718354.4697099 }