14056 lines
580 KiB
Plaintext
14056 lines
580 KiB
Plaintext
{
|
|
"type": "bundle",
|
|
"id": "bundle--61366cef-1f65-469f-9d8c-ec12baf0a87c",
|
|
"objects": [
|
|
{
|
|
"type": "malware",
|
|
"spec_version": "2.1",
|
|
"id": "malware--d392e660-8159-4485-be85-2c021db07c5d",
|
|
"created": "2026-02-17T19:39:51.745031Z",
|
|
"modified": "2026-02-17T19:39:51.745031Z",
|
|
"name": "Predator",
|
|
"description": "IOCs for Intellexa Predator",
|
|
"is_family": false
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7df7da76-baa5-48be-98b3-ae9b4bd84184",
|
|
"created": "2026-02-17T19:39:51.745209Z",
|
|
"modified": "2026-02-17T19:39:51.745209Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='exclusivo24h.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.745209Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--72c7cf1f-851a-4f0a-a96c-30b404c51c59",
|
|
"created": "2026-02-17T19:39:51.749965Z",
|
|
"modified": "2026-02-17T19:39:51.749965Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7df7da76-baa5-48be-98b3-ae9b4bd84184",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d4c88c80-5f3f-4420-9ce2-5ae0e779e052",
|
|
"created": "2026-02-17T19:39:51.750299Z",
|
|
"modified": "2026-02-17T19:39:51.750299Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='coazoa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.750299Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--af0f60b6-4963-472c-a020-c75eb59f7a32",
|
|
"created": "2026-02-17T19:39:51.750795Z",
|
|
"modified": "2026-02-17T19:39:51.750795Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d4c88c80-5f3f-4420-9ce2-5ae0e779e052",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--22473bf3-f161-4937-b023-c5fcf92721c5",
|
|
"created": "2026-02-17T19:39:51.750884Z",
|
|
"modified": "2026-02-17T19:39:51.750884Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='yout.ube.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.750884Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--38db7007-7819-4e4a-a597-c7444084d26a",
|
|
"created": "2026-02-17T19:39:51.751428Z",
|
|
"modified": "2026-02-17T19:39:51.751428Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--22473bf3-f161-4937-b023-c5fcf92721c5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4d38b455-078e-4eef-afe9-2bd5b48da779",
|
|
"created": "2026-02-17T19:39:51.751513Z",
|
|
"modified": "2026-02-17T19:39:51.751513Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='md-news-direct.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.751513Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7b0fc875-4d78-4029-b4c0-f1463b05d033",
|
|
"created": "2026-02-17T19:39:51.752027Z",
|
|
"modified": "2026-02-17T19:39:51.752027Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4d38b455-078e-4eef-afe9-2bd5b48da779",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--102d27b4-b72c-426e-9764-e8953e8f5a14",
|
|
"created": "2026-02-17T19:39:51.752112Z",
|
|
"modified": "2026-02-17T19:39:51.752112Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='serviceupdaterequest.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.752112Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--072c0856-23aa-412e-9d94-cbd24b12b98e",
|
|
"created": "2026-02-17T19:39:51.752613Z",
|
|
"modified": "2026-02-17T19:39:51.752613Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--102d27b4-b72c-426e-9764-e8953e8f5a14",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b2af4760-903c-4b7f-af82-3b3eaf1f1f51",
|
|
"created": "2026-02-17T19:39:51.752697Z",
|
|
"modified": "2026-02-17T19:39:51.752697Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cbbc01.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.752697Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f6cdaf31-bf61-47d7-9fe2-04284d659608",
|
|
"created": "2026-02-17T19:39:51.753134Z",
|
|
"modified": "2026-02-17T19:39:51.753134Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b2af4760-903c-4b7f-af82-3b3eaf1f1f51",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b11f78d3-42f7-4fb0-9a87-4d8b8338d61d",
|
|
"created": "2026-02-17T19:39:51.753215Z",
|
|
"modified": "2026-02-17T19:39:51.753215Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='suarajubi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.753215Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--30f1c97f-815c-47ec-b3f0-cd7c9a6ec565",
|
|
"created": "2026-02-17T19:39:51.753594Z",
|
|
"modified": "2026-02-17T19:39:51.753594Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b11f78d3-42f7-4fb0-9a87-4d8b8338d61d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6fa0f6e1-4558-415a-84d8-78870d226957",
|
|
"created": "2026-02-17T19:39:51.753677Z",
|
|
"modified": "2026-02-17T19:39:51.753677Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='skranski.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.753677Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--05606110-b205-4581-9722-028c918520f7",
|
|
"created": "2026-02-17T19:39:51.75405Z",
|
|
"modified": "2026-02-17T19:39:51.75405Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6fa0f6e1-4558-415a-84d8-78870d226957",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--16818bb0-3fd1-497a-9b70-dfb98d098b42",
|
|
"created": "2026-02-17T19:39:51.754131Z",
|
|
"modified": "2026-02-17T19:39:51.754131Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mujimbo.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.754131Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ed773080-b047-4654-97b2-31983064698d",
|
|
"created": "2026-02-17T19:39:51.754463Z",
|
|
"modified": "2026-02-17T19:39:51.754463Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--16818bb0-3fd1-497a-9b70-dfb98d098b42",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4c747803-9f0f-42f5-abe2-585453dfa8ba",
|
|
"created": "2026-02-17T19:39:51.754543Z",
|
|
"modified": "2026-02-17T19:39:51.754543Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cyber.country']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.754543Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d3f6a6c9-09cc-4429-bf45-2558308cd0fb",
|
|
"created": "2026-02-17T19:39:51.754881Z",
|
|
"modified": "2026-02-17T19:39:51.754881Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4c747803-9f0f-42f5-abe2-585453dfa8ba",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--69994d0f-00c6-4677-8b30-21168e245406",
|
|
"created": "2026-02-17T19:39:51.754961Z",
|
|
"modified": "2026-02-17T19:39:51.754961Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='platinalines.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.754961Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f0421016-3389-4078-aa9d-47255cfb5991",
|
|
"created": "2026-02-17T19:39:51.755347Z",
|
|
"modified": "2026-02-17T19:39:51.755347Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--69994d0f-00c6-4677-8b30-21168e245406",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5d9d2c47-c6eb-4eb6-b7f9-19195fdffec4",
|
|
"created": "2026-02-17T19:39:51.755427Z",
|
|
"modified": "2026-02-17T19:39:51.755427Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='buildneeds.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.755427Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b96fb441-f9b3-4b5b-9abc-3716c4a3bfae",
|
|
"created": "2026-02-17T19:39:51.755896Z",
|
|
"modified": "2026-02-17T19:39:51.755896Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5d9d2c47-c6eb-4eb6-b7f9-19195fdffec4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--040dbc6e-dec9-4ffe-ad2c-963db7fb5b32",
|
|
"created": "2026-02-17T19:39:51.75603Z",
|
|
"modified": "2026-02-17T19:39:51.75603Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='emvolio-gov.gr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.75603Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--637c5de1-da54-4cb8-8a42-d9087cd551cf",
|
|
"created": "2026-02-17T19:39:51.756413Z",
|
|
"modified": "2026-02-17T19:39:51.756413Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--040dbc6e-dec9-4ffe-ad2c-963db7fb5b32",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3fefabf2-d25f-4922-9d83-c4c36d2a6382",
|
|
"created": "2026-02-17T19:39:51.756495Z",
|
|
"modified": "2026-02-17T19:39:51.756495Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='get-location.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.756495Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--20a19008-638e-4fce-a5b9-33a5b93be057",
|
|
"created": "2026-02-17T19:39:51.756963Z",
|
|
"modified": "2026-02-17T19:39:51.756963Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3fefabf2-d25f-4922-9d83-c4c36d2a6382",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b234e085-0110-4c83-909a-8db2874eb9fd",
|
|
"created": "2026-02-17T19:39:51.757042Z",
|
|
"modified": "2026-02-17T19:39:51.757042Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lilpastanews.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.757042Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5450bc6c-f302-4c24-9654-708b5281448d",
|
|
"created": "2026-02-17T19:39:51.757403Z",
|
|
"modified": "2026-02-17T19:39:51.757403Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b234e085-0110-4c83-909a-8db2874eb9fd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0ce83e13-54b9-4040-9892-e74ef23beb26",
|
|
"created": "2026-02-17T19:39:51.75748Z",
|
|
"modified": "2026-02-17T19:39:51.75748Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='weathear.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.75748Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f5067582-ac0b-4234-a9fd-d3b388cff33d",
|
|
"created": "2026-02-17T19:39:51.757835Z",
|
|
"modified": "2026-02-17T19:39:51.757835Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0ce83e13-54b9-4040-9892-e74ef23beb26",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3e3e98ac-9f30-4624-b3d4-891f0978864e",
|
|
"created": "2026-02-17T19:39:51.757912Z",
|
|
"modified": "2026-02-17T19:39:51.757912Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='goldenscent.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.757912Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2742367b-e357-48a3-a97d-961ca1ab3c06",
|
|
"created": "2026-02-17T19:39:51.758226Z",
|
|
"modified": "2026-02-17T19:39:51.758226Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3e3e98ac-9f30-4624-b3d4-891f0978864e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--db0bb096-dca3-4fe0-b2e9-0d938301f64e",
|
|
"created": "2026-02-17T19:39:51.758301Z",
|
|
"modified": "2026-02-17T19:39:51.758301Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kroal.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.758301Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5d068998-6a19-40fb-a11e-d18153766171",
|
|
"created": "2026-02-17T19:39:51.758861Z",
|
|
"modified": "2026-02-17T19:39:51.758861Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--db0bb096-dca3-4fe0-b2e9-0d938301f64e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1e5db13f-3b02-40c5-bd2a-4c28ecd76445",
|
|
"created": "2026-02-17T19:39:51.758959Z",
|
|
"modified": "2026-02-17T19:39:51.758959Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mycoffeeshop.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.758959Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--326ad046-f1f5-4ee7-9021-f94f57ee42ce",
|
|
"created": "2026-02-17T19:39:51.759354Z",
|
|
"modified": "2026-02-17T19:39:51.759354Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1e5db13f-3b02-40c5-bd2a-4c28ecd76445",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--aab54609-14cb-4d6f-aa33-fe0f91040456",
|
|
"created": "2026-02-17T19:39:51.759435Z",
|
|
"modified": "2026-02-17T19:39:51.759435Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cnn.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.759435Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5b50b44f-6e6d-4ddb-9123-22b6026362bd",
|
|
"created": "2026-02-17T19:39:51.759772Z",
|
|
"modified": "2026-02-17T19:39:51.759772Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--aab54609-14cb-4d6f-aa33-fe0f91040456",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2b82f9c4-6072-4ba5-afd3-44b912eea04f",
|
|
"created": "2026-02-17T19:39:51.759852Z",
|
|
"modified": "2026-02-17T19:39:51.759852Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='timeupdate.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.759852Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4ec986c2-8686-4ee8-b768-8bf361bb12e5",
|
|
"created": "2026-02-17T19:39:51.760234Z",
|
|
"modified": "2026-02-17T19:39:51.760234Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2b82f9c4-6072-4ba5-afd3-44b912eea04f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d268b728-fc61-4402-9b52-370b3010b0a0",
|
|
"created": "2026-02-17T19:39:51.760313Z",
|
|
"modified": "2026-02-17T19:39:51.760313Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='chat-support.support']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.760313Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--344db8af-4b8a-48c6-befc-bb90ec3f8801",
|
|
"created": "2026-02-17T19:39:51.760657Z",
|
|
"modified": "2026-02-17T19:39:51.760657Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d268b728-fc61-4402-9b52-370b3010b0a0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d97f0c1c-79cf-46bf-b6c1-d56a5c0da018",
|
|
"created": "2026-02-17T19:39:51.760737Z",
|
|
"modified": "2026-02-17T19:39:51.760737Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='orchomenos.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.760737Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4bb8ba09-9b7d-4414-88f7-3503dc1213c3",
|
|
"created": "2026-02-17T19:39:51.761197Z",
|
|
"modified": "2026-02-17T19:39:51.761197Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d97f0c1c-79cf-46bf-b6c1-d56a5c0da018",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5c20bf02-a774-40d0-98f0-51f68854c028",
|
|
"created": "2026-02-17T19:39:51.76128Z",
|
|
"modified": "2026-02-17T19:39:51.76128Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='msas.ws']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.76128Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--92a0b520-3a29-45b3-bee2-aa39b527b4bf",
|
|
"created": "2026-02-17T19:39:51.761611Z",
|
|
"modified": "2026-02-17T19:39:51.761611Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5c20bf02-a774-40d0-98f0-51f68854c028",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8f6d9e0f-a11b-46ce-9cc2-38d16561add9",
|
|
"created": "2026-02-17T19:39:51.76169Z",
|
|
"modified": "2026-02-17T19:39:51.76169Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ps1link.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.76169Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3a1da61b-1965-41ec-af18-ffe0628f7de2",
|
|
"created": "2026-02-17T19:39:51.762018Z",
|
|
"modified": "2026-02-17T19:39:51.762018Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8f6d9e0f-a11b-46ce-9cc2-38d16561add9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--837c39b5-aea5-490a-b79d-c539830bdd70",
|
|
"created": "2026-02-17T19:39:51.762098Z",
|
|
"modified": "2026-02-17T19:39:51.762098Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='playestore.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.762098Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--959be27a-ed09-49d3-af9c-88e7a09805b0",
|
|
"created": "2026-02-17T19:39:51.762426Z",
|
|
"modified": "2026-02-17T19:39:51.762426Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--837c39b5-aea5-490a-b79d-c539830bdd70",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--140ec46d-0cee-4c9e-b2fc-475b509904fa",
|
|
"created": "2026-02-17T19:39:51.762506Z",
|
|
"modified": "2026-02-17T19:39:51.762506Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtu-be.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.762506Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9cdf3acc-56c8-4b9d-95f1-5089c0c6bd53",
|
|
"created": "2026-02-17T19:39:51.762838Z",
|
|
"modified": "2026-02-17T19:39:51.762838Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--140ec46d-0cee-4c9e-b2fc-475b509904fa",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8b0d6e2a-f59c-4419-8698-61a3441aebfc",
|
|
"created": "2026-02-17T19:39:51.762918Z",
|
|
"modified": "2026-02-17T19:39:51.762918Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='advfb.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.762918Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--74bb3ff8-cde5-42f1-9aa6-401def10a512",
|
|
"created": "2026-02-17T19:39:51.763287Z",
|
|
"modified": "2026-02-17T19:39:51.763287Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8b0d6e2a-f59c-4419-8698-61a3441aebfc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--991306ea-d874-4c41-8e06-3867cd99a022",
|
|
"created": "2026-02-17T19:39:51.763367Z",
|
|
"modified": "2026-02-17T19:39:51.763367Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nemshi-news.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.763367Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--93258a1c-a2f4-46a6-866f-77db1c6b47be",
|
|
"created": "2026-02-17T19:39:51.763739Z",
|
|
"modified": "2026-02-17T19:39:51.763739Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--991306ea-d874-4c41-8e06-3867cd99a022",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--65e8d482-d972-4399-ab2f-f850f7f3d675",
|
|
"created": "2026-02-17T19:39:51.763824Z",
|
|
"modified": "2026-02-17T19:39:51.763824Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wa-info.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.763824Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--50e34e10-41c7-48a6-8664-ef83283e6997",
|
|
"created": "2026-02-17T19:39:51.764148Z",
|
|
"modified": "2026-02-17T19:39:51.764148Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--65e8d482-d972-4399-ab2f-f850f7f3d675",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--95f60ca5-3afb-4e17-85d0-512a84d07af1",
|
|
"created": "2026-02-17T19:39:51.764229Z",
|
|
"modified": "2026-02-17T19:39:51.764229Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='qamqors.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.764229Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--58e14ed9-6784-4677-b11c-dc0acba6e09e",
|
|
"created": "2026-02-17T19:39:51.764591Z",
|
|
"modified": "2026-02-17T19:39:51.764591Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--95f60ca5-3afb-4e17-85d0-512a84d07af1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--00f89c09-710a-4d6d-9932-a6202703b9bb",
|
|
"created": "2026-02-17T19:39:51.764673Z",
|
|
"modified": "2026-02-17T19:39:51.764673Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sitepref.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.764673Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6f573914-04fa-47de-ac5c-bc913fadd415",
|
|
"created": "2026-02-17T19:39:51.764998Z",
|
|
"modified": "2026-02-17T19:39:51.764998Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--00f89c09-710a-4d6d-9932-a6202703b9bb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--25e69adb-ba32-426d-ad0b-cfd564d370d2",
|
|
"created": "2026-02-17T19:39:51.765078Z",
|
|
"modified": "2026-02-17T19:39:51.765078Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='angop.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.765078Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--af218ca0-4c08-4f01-8ef0-4b1c4f4d8088",
|
|
"created": "2026-02-17T19:39:51.765472Z",
|
|
"modified": "2026-02-17T19:39:51.765472Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--25e69adb-ba32-426d-ad0b-cfd564d370d2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dbfbef2f-a230-4a88-96b8-d2306d6300f3",
|
|
"created": "2026-02-17T19:39:51.765553Z",
|
|
"modified": "2026-02-17T19:39:51.765553Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='safelyredirecting.digital']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.765553Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d517040b-2a6b-4245-ac6c-f20a63395ed3",
|
|
"created": "2026-02-17T19:39:51.765887Z",
|
|
"modified": "2026-02-17T19:39:51.765887Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dbfbef2f-a230-4a88-96b8-d2306d6300f3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--449c2c25-4b53-4d94-9edc-91d0a864cff1",
|
|
"created": "2026-02-17T19:39:51.765965Z",
|
|
"modified": "2026-02-17T19:39:51.765965Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='suzuki.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.765965Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4b5eb8db-6816-4c9f-ae0f-f092700dc9fb",
|
|
"created": "2026-02-17T19:39:51.766281Z",
|
|
"modified": "2026-02-17T19:39:51.766281Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--449c2c25-4b53-4d94-9edc-91d0a864cff1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f8b0270d-7945-4cf8-b1f2-492bf677e4c0",
|
|
"created": "2026-02-17T19:39:51.766357Z",
|
|
"modified": "2026-02-17T19:39:51.766357Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='02s.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.766357Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--70ad093c-ddaf-46b3-b631-8a0bee0ef9a4",
|
|
"created": "2026-02-17T19:39:51.766708Z",
|
|
"modified": "2026-02-17T19:39:51.766708Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f8b0270d-7945-4cf8-b1f2-492bf677e4c0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b078a965-4327-429c-a1a4-3fb7da3d8b75",
|
|
"created": "2026-02-17T19:39:51.766787Z",
|
|
"modified": "2026-02-17T19:39:51.766787Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='pronews.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.766787Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3758ae72-203d-4495-bcbc-6e58af614b9c",
|
|
"created": "2026-02-17T19:39:51.767115Z",
|
|
"modified": "2026-02-17T19:39:51.767115Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b078a965-4327-429c-a1a4-3fb7da3d8b75",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e7d866f7-fd70-495d-a9d5-930b01b9a7b9",
|
|
"created": "2026-02-17T19:39:51.767193Z",
|
|
"modified": "2026-02-17T19:39:51.767193Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='linktothisa.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.767193Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3eff08da-41a0-43a9-a16b-13ce38dc651f",
|
|
"created": "2026-02-17T19:39:51.767522Z",
|
|
"modified": "2026-02-17T19:39:51.767522Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e7d866f7-fd70-495d-a9d5-930b01b9a7b9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--eee2955b-f6a4-4154-8705-2eac796a9880",
|
|
"created": "2026-02-17T19:39:51.767603Z",
|
|
"modified": "2026-02-17T19:39:51.767603Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vendaswebs.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.767603Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--70f0e8bb-1536-48ef-a0ca-ca46fcae6913",
|
|
"created": "2026-02-17T19:39:51.767969Z",
|
|
"modified": "2026-02-17T19:39:51.767969Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--eee2955b-f6a4-4154-8705-2eac796a9880",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3b878a43-411f-4007-813c-a2f45aed1f5d",
|
|
"created": "2026-02-17T19:39:51.768048Z",
|
|
"modified": "2026-02-17T19:39:51.768048Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='enigmase.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.768048Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cea74a69-4ef2-4279-80cb-0e9d5a4de3a7",
|
|
"created": "2026-02-17T19:39:51.768373Z",
|
|
"modified": "2026-02-17T19:39:51.768373Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3b878a43-411f-4007-813c-a2f45aed1f5d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--775f75a0-0744-44d7-84d8-380e691f6f08",
|
|
"created": "2026-02-17T19:39:51.768468Z",
|
|
"modified": "2026-02-17T19:39:51.768468Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newsworldsports.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.768468Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0d24fc79-c764-49a8-9c0c-afcca9c69f9b",
|
|
"created": "2026-02-17T19:39:51.76879Z",
|
|
"modified": "2026-02-17T19:39:51.76879Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--775f75a0-0744-44d7-84d8-380e691f6f08",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e4816273-7e7f-47a1-bf27-47656168ae8a",
|
|
"created": "2026-02-17T19:39:51.768866Z",
|
|
"modified": "2026-02-17T19:39:51.768866Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sportsnewz.site']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.768866Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7d402477-2bfa-4bdd-bffa-fc7d6a09b9b0",
|
|
"created": "2026-02-17T19:39:51.76925Z",
|
|
"modified": "2026-02-17T19:39:51.76925Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e4816273-7e7f-47a1-bf27-47656168ae8a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dd9f2b68-02d2-4283-a4e7-26575b077496",
|
|
"created": "2026-02-17T19:39:51.769329Z",
|
|
"modified": "2026-02-17T19:39:51.769329Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='localegem.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.769329Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5863c3e6-3b8b-4b3b-8a40-8355a44fb912",
|
|
"created": "2026-02-17T19:39:51.769653Z",
|
|
"modified": "2026-02-17T19:39:51.769653Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dd9f2b68-02d2-4283-a4e7-26575b077496",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a9de46a8-3a7c-4ddc-95b4-bf1beb5ac4ee",
|
|
"created": "2026-02-17T19:39:51.769733Z",
|
|
"modified": "2026-02-17T19:39:51.769733Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wtc1111.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.769733Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--264ee849-bd54-4af2-b727-89e7ea7c94b4",
|
|
"created": "2026-02-17T19:39:51.770057Z",
|
|
"modified": "2026-02-17T19:39:51.770057Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a9de46a8-3a7c-4ddc-95b4-bf1beb5ac4ee",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--490e9b40-58f4-421e-a9bd-6487a6ff993d",
|
|
"created": "2026-02-17T19:39:51.770137Z",
|
|
"modified": "2026-02-17T19:39:51.770137Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='adibjan.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.770137Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c4ab65cd-93e4-4926-b5ff-4836600a74dc",
|
|
"created": "2026-02-17T19:39:51.770457Z",
|
|
"modified": "2026-02-17T19:39:51.770457Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--490e9b40-58f4-421e-a9bd-6487a6ff993d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--266b725f-b689-4c88-9fd1-56d43ac41c94",
|
|
"created": "2026-02-17T19:39:51.770535Z",
|
|
"modified": "2026-02-17T19:39:51.770535Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='verifyurl.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.770535Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--10ceba8d-8d9e-4518-9824-d3ce1243325f",
|
|
"created": "2026-02-17T19:39:51.770878Z",
|
|
"modified": "2026-02-17T19:39:51.770878Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--266b725f-b689-4c88-9fd1-56d43ac41c94",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--42e23231-4919-48a5-80af-cde74b51e7a0",
|
|
"created": "2026-02-17T19:39:51.770958Z",
|
|
"modified": "2026-02-17T19:39:51.770958Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='miniiosapps.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.770958Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e4efdd8e-ac61-4002-870d-772e27d44fc6",
|
|
"created": "2026-02-17T19:39:51.771286Z",
|
|
"modified": "2026-02-17T19:39:51.771286Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--42e23231-4919-48a5-80af-cde74b51e7a0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--70a1d4aa-6346-4f3a-8c98-22acfd280100",
|
|
"created": "2026-02-17T19:39:51.771367Z",
|
|
"modified": "2026-02-17T19:39:51.771367Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='grvnews.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.771367Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6a4b6565-febd-45db-a0e6-941462fb433d",
|
|
"created": "2026-02-17T19:39:51.771689Z",
|
|
"modified": "2026-02-17T19:39:51.771689Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--70a1d4aa-6346-4f3a-8c98-22acfd280100",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--16a5a7a2-13db-4326-9af2-89f9d5abb373",
|
|
"created": "2026-02-17T19:39:51.771769Z",
|
|
"modified": "2026-02-17T19:39:51.771769Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='zoometting.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.771769Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--469c2310-c630-44bc-ac9d-1ecf651edebf",
|
|
"created": "2026-02-17T19:39:51.772141Z",
|
|
"modified": "2026-02-17T19:39:51.772141Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--16a5a7a2-13db-4326-9af2-89f9d5abb373",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fa8955f6-8c28-46a9-b8c2-16ae4ec7567a",
|
|
"created": "2026-02-17T19:39:51.772221Z",
|
|
"modified": "2026-02-17T19:39:51.772221Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='oilgy.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.772221Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2a24a2c6-4a72-4b8b-82d6-79ce992ffaca",
|
|
"created": "2026-02-17T19:39:51.772538Z",
|
|
"modified": "2026-02-17T19:39:51.772538Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fa8955f6-8c28-46a9-b8c2-16ae4ec7567a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b25fd93e-22bc-48bb-a3e9-1fda5c3f0f57",
|
|
"created": "2026-02-17T19:39:51.772615Z",
|
|
"modified": "2026-02-17T19:39:51.772615Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='static-graph.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.772615Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--247071be-3ab0-49d7-8edb-6513469a3717",
|
|
"created": "2026-02-17T19:39:51.773008Z",
|
|
"modified": "2026-02-17T19:39:51.773008Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b25fd93e-22bc-48bb-a3e9-1fda5c3f0f57",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fca92db7-fabe-4afe-8497-ac9ebae60ca5",
|
|
"created": "2026-02-17T19:39:51.773088Z",
|
|
"modified": "2026-02-17T19:39:51.773088Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='correiosdeangola.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.773088Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--30d53c71-90b9-48fe-b4f8-5d0629e7f276",
|
|
"created": "2026-02-17T19:39:51.773418Z",
|
|
"modified": "2026-02-17T19:39:51.773418Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fca92db7-fabe-4afe-8497-ac9ebae60ca5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5fe01d8f-b4b7-4a1a-a43c-66b83f9ba42c",
|
|
"created": "2026-02-17T19:39:51.773497Z",
|
|
"modified": "2026-02-17T19:39:51.773497Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='quickupdates.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.773497Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bbf666d0-15d0-4149-88db-da670f2a4274",
|
|
"created": "2026-02-17T19:39:51.773869Z",
|
|
"modified": "2026-02-17T19:39:51.773869Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5fe01d8f-b4b7-4a1a-a43c-66b83f9ba42c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bf0162b0-e531-4262-8c94-735dd2e0bda6",
|
|
"created": "2026-02-17T19:39:51.773976Z",
|
|
"modified": "2026-02-17T19:39:51.773976Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='popup-pw.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.773976Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--23ea3e3e-f082-467a-a4ed-05aac2dfcf94",
|
|
"created": "2026-02-17T19:39:51.774317Z",
|
|
"modified": "2026-02-17T19:39:51.774317Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bf0162b0-e531-4262-8c94-735dd2e0bda6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--756b98c3-8f3e-4cfd-a576-158925d9fd0c",
|
|
"created": "2026-02-17T19:39:51.774404Z",
|
|
"modified": "2026-02-17T19:39:51.774404Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='folha8.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.774404Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bb5397f0-ccee-4eeb-8744-852e9e15caa3",
|
|
"created": "2026-02-17T19:39:51.774805Z",
|
|
"modified": "2026-02-17T19:39:51.774805Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--756b98c3-8f3e-4cfd-a576-158925d9fd0c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c5647f4f-8204-4789-9750-6e29f5afa4a9",
|
|
"created": "2026-02-17T19:39:51.774886Z",
|
|
"modified": "2026-02-17T19:39:51.774886Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='aoatlasescort.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.774886Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--27860f42-33a8-4bb4-9f6b-4f513e3afb4a",
|
|
"created": "2026-02-17T19:39:51.775206Z",
|
|
"modified": "2026-02-17T19:39:51.775206Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c5647f4f-8204-4789-9750-6e29f5afa4a9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ea9a82e4-cea4-4bab-8748-cc6717b51bce",
|
|
"created": "2026-02-17T19:39:51.775285Z",
|
|
"modified": "2026-02-17T19:39:51.775285Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='eg-gov.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.775285Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--993a14ad-94d6-4694-a326-264a33b0abd2",
|
|
"created": "2026-02-17T19:39:51.775608Z",
|
|
"modified": "2026-02-17T19:39:51.775608Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ea9a82e4-cea4-4bab-8748-cc6717b51bce",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2c096c70-8ff5-477a-823e-7f06223f2aae",
|
|
"created": "2026-02-17T19:39:51.77569Z",
|
|
"modified": "2026-02-17T19:39:51.77569Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newspool.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.77569Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8257b62b-8d08-4ffc-803d-29971fb1174f",
|
|
"created": "2026-02-17T19:39:51.776012Z",
|
|
"modified": "2026-02-17T19:39:51.776012Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2c096c70-8ff5-477a-823e-7f06223f2aae",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--529ef0ac-2a37-49e7-8802-383c4cc6e59a",
|
|
"created": "2026-02-17T19:39:51.776091Z",
|
|
"modified": "2026-02-17T19:39:51.776091Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tohna.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.776091Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7f0ecb66-40f8-49c6-b8dc-463015ff6c33",
|
|
"created": "2026-02-17T19:39:51.776411Z",
|
|
"modified": "2026-02-17T19:39:51.776411Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--529ef0ac-2a37-49e7-8802-383c4cc6e59a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fa4efe0f-c80e-462b-90df-86ecde9cbf35",
|
|
"created": "2026-02-17T19:39:51.776487Z",
|
|
"modified": "2026-02-17T19:39:51.776487Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kz-shops.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.776487Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bf5d9069-2d12-4329-adfe-9d2de9c45624",
|
|
"created": "2026-02-17T19:39:51.776961Z",
|
|
"modified": "2026-02-17T19:39:51.776961Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fa4efe0f-c80e-462b-90df-86ecde9cbf35",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2e38e4ba-6ece-4379-a4a7-2252f027615e",
|
|
"created": "2026-02-17T19:39:51.777061Z",
|
|
"modified": "2026-02-17T19:39:51.777061Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='teslal.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.777061Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c2bdbad0-fdd2-4b9f-8939-e9b0638600f4",
|
|
"created": "2026-02-17T19:39:51.777399Z",
|
|
"modified": "2026-02-17T19:39:51.777399Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2e38e4ba-6ece-4379-a4a7-2252f027615e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fdd0de2e-2bce-4e57-a71a-51f995df7222",
|
|
"created": "2026-02-17T19:39:51.777492Z",
|
|
"modified": "2026-02-17T19:39:51.777492Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='engine.ninja']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.777492Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1bad417a-c959-4a3f-b18b-b56ab4233e31",
|
|
"created": "2026-02-17T19:39:51.777821Z",
|
|
"modified": "2026-02-17T19:39:51.777821Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fdd0de2e-2bce-4e57-a71a-51f995df7222",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f774aa0e-514d-492d-9e92-a3298b8eb964",
|
|
"created": "2026-02-17T19:39:51.777899Z",
|
|
"modified": "2026-02-17T19:39:51.777899Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='intnews.world']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.777899Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cac0c207-e264-4eda-b9eb-d7d722f305e0",
|
|
"created": "2026-02-17T19:39:51.778291Z",
|
|
"modified": "2026-02-17T19:39:51.778291Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f774aa0e-514d-492d-9e92-a3298b8eb964",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5309f235-934b-4d96-b55e-331b9250283f",
|
|
"created": "2026-02-17T19:39:51.778377Z",
|
|
"modified": "2026-02-17T19:39:51.778377Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='connectivitychecker.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.778377Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--59742f6e-a67b-4173-ae87-fdfb8c287d51",
|
|
"created": "2026-02-17T19:39:51.778706Z",
|
|
"modified": "2026-02-17T19:39:51.778706Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5309f235-934b-4d96-b55e-331b9250283f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1b710b71-d419-4d04-b073-948b0ffc8077",
|
|
"created": "2026-02-17T19:39:51.778783Z",
|
|
"modified": "2026-02-17T19:39:51.778783Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tiny.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.778783Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3cbc5339-4057-4d55-9538-70a4485d43b1",
|
|
"created": "2026-02-17T19:39:51.779096Z",
|
|
"modified": "2026-02-17T19:39:51.779096Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1b710b71-d419-4d04-b073-948b0ffc8077",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--985340ad-f512-4137-94d7-63a7165b8a57",
|
|
"created": "2026-02-17T19:39:51.779171Z",
|
|
"modified": "2026-02-17T19:39:51.779171Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='visavfsglobal.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.779171Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--03d48318-8008-4d73-b331-9fce264fe0ee",
|
|
"created": "2026-02-17T19:39:51.779478Z",
|
|
"modified": "2026-02-17T19:39:51.779478Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--985340ad-f512-4137-94d7-63a7165b8a57",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--840f71d1-b84b-448f-ae8e-43e4b989d2a1",
|
|
"created": "2026-02-17T19:39:51.779552Z",
|
|
"modified": "2026-02-17T19:39:51.779552Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='servers-mobile.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.779552Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9a13437a-b2db-4021-8db8-c8137460e851",
|
|
"created": "2026-02-17T19:39:51.779866Z",
|
|
"modified": "2026-02-17T19:39:51.779866Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--840f71d1-b84b-448f-ae8e-43e4b989d2a1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ab0f214b-2295-48e5-a88d-68eb43dee6c0",
|
|
"created": "2026-02-17T19:39:51.779943Z",
|
|
"modified": "2026-02-17T19:39:51.779943Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shorten.fi']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.779943Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--04a44a1e-7c58-4ca8-853a-c7a1c6db5bb6",
|
|
"created": "2026-02-17T19:39:51.780252Z",
|
|
"modified": "2026-02-17T19:39:51.780252Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ab0f214b-2295-48e5-a88d-68eb43dee6c0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a890f8ec-b3d3-4821-94fb-0a171dcf95cc",
|
|
"created": "2026-02-17T19:39:51.780329Z",
|
|
"modified": "2026-02-17T19:39:51.780329Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sextape225.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.780329Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--53ebed8d-5b94-4a6e-b759-fa6b6b5b5b9d",
|
|
"created": "2026-02-17T19:39:51.78075Z",
|
|
"modified": "2026-02-17T19:39:51.78075Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a890f8ec-b3d3-4821-94fb-0a171dcf95cc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6988a03f-3ce1-4b83-b058-3a34bc8f88e5",
|
|
"created": "2026-02-17T19:39:51.780831Z",
|
|
"modified": "2026-02-17T19:39:51.780831Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ereportaz.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.780831Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e152ee92-04be-4dbf-9567-4dc95f442eb3",
|
|
"created": "2026-02-17T19:39:51.781145Z",
|
|
"modified": "2026-02-17T19:39:51.781145Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6988a03f-3ce1-4b83-b058-3a34bc8f88e5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7fc8c1e8-260a-4c20-bb52-07d3dc862cbc",
|
|
"created": "2026-02-17T19:39:51.781222Z",
|
|
"modified": "2026-02-17T19:39:51.781222Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lexpress-mg.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.781222Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0f65f141-3963-43b7-b480-f5790b8cad5f",
|
|
"created": "2026-02-17T19:39:51.78154Z",
|
|
"modified": "2026-02-17T19:39:51.78154Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7fc8c1e8-260a-4c20-bb52-07d3dc862cbc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--608987a9-b9ce-4ee0-9cc3-8d109d127b04",
|
|
"created": "2026-02-17T19:39:51.781617Z",
|
|
"modified": "2026-02-17T19:39:51.781617Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mobnetlink3.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.781617Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cb213195-2083-4143-9232-76c09da1108e",
|
|
"created": "2026-02-17T19:39:51.781976Z",
|
|
"modified": "2026-02-17T19:39:51.781976Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--608987a9-b9ce-4ee0-9cc3-8d109d127b04",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a1fe0fd2-a9c6-49e8-88bb-bd12ea96a22c",
|
|
"created": "2026-02-17T19:39:51.782055Z",
|
|
"modified": "2026-02-17T19:39:51.782055Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='conlnk.one']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.782055Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4b6246bc-d00b-4769-a4c7-bbcdeda99db7",
|
|
"created": "2026-02-17T19:39:51.782374Z",
|
|
"modified": "2026-02-17T19:39:51.782374Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a1fe0fd2-a9c6-49e8-88bb-bd12ea96a22c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2697e699-7aa5-4faf-8f8d-6842e49f6674",
|
|
"created": "2026-02-17T19:39:51.782453Z",
|
|
"modified": "2026-02-17T19:39:51.782453Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ebill.cosmote.center']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.782453Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a3703193-162c-4b04-b185-6988d5d4df87",
|
|
"created": "2026-02-17T19:39:51.782779Z",
|
|
"modified": "2026-02-17T19:39:51.782779Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2697e699-7aa5-4faf-8f8d-6842e49f6674",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c95ba2c1-1b86-4251-8b87-def310056922",
|
|
"created": "2026-02-17T19:39:51.782857Z",
|
|
"modified": "2026-02-17T19:39:51.782857Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ongsworld.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.782857Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9d73eb5a-6c53-4fae-9ba8-57664b20f7a2",
|
|
"created": "2026-02-17T19:39:51.783178Z",
|
|
"modified": "2026-02-17T19:39:51.783178Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c95ba2c1-1b86-4251-8b87-def310056922",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0995d496-82de-4886-a4f7-cb3676f4f207",
|
|
"created": "2026-02-17T19:39:51.783256Z",
|
|
"modified": "2026-02-17T19:39:51.783256Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='msbsck.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.783256Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2c14e403-c9cb-4155-b972-2593c11861ec",
|
|
"created": "2026-02-17T19:39:51.783573Z",
|
|
"modified": "2026-02-17T19:39:51.783573Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0995d496-82de-4886-a4f7-cb3676f4f207",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5102b0ea-cfdf-4868-b09b-1be444676ce4",
|
|
"created": "2026-02-17T19:39:51.783652Z",
|
|
"modified": "2026-02-17T19:39:51.783652Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cut.red']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.783652Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--78c1bd0c-bb16-4966-982e-625a5d0a75e8",
|
|
"created": "2026-02-17T19:39:51.783968Z",
|
|
"modified": "2026-02-17T19:39:51.783968Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5102b0ea-cfdf-4868-b09b-1be444676ce4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1825a50d-2bf6-49d4-810e-7bca31798680",
|
|
"created": "2026-02-17T19:39:51.784047Z",
|
|
"modified": "2026-02-17T19:39:51.784047Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bbitly.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.784047Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--10fdd863-713e-4aed-8fe8-2114e1d4e2dc",
|
|
"created": "2026-02-17T19:39:51.784436Z",
|
|
"modified": "2026-02-17T19:39:51.784436Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1825a50d-2bf6-49d4-810e-7bca31798680",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fcb0753c-3404-4f5f-8859-78ac7f445cbb",
|
|
"created": "2026-02-17T19:39:51.784516Z",
|
|
"modified": "2026-02-17T19:39:51.784516Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='olimpbets.kz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.784516Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--78daa0b5-9573-4b31-ac14-a3f44aed94b0",
|
|
"created": "2026-02-17T19:39:51.784833Z",
|
|
"modified": "2026-02-17T19:39:51.784833Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fcb0753c-3404-4f5f-8859-78ac7f445cbb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--81dc3f85-bc90-49aa-8e2b-906445660eff",
|
|
"created": "2026-02-17T19:39:51.784915Z",
|
|
"modified": "2026-02-17T19:39:51.784915Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='solargoup.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.784915Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9dae209e-1188-478d-8a23-6097a7372856",
|
|
"created": "2026-02-17T19:39:51.785234Z",
|
|
"modified": "2026-02-17T19:39:51.785234Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--81dc3f85-bc90-49aa-8e2b-906445660eff",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3be7e85f-9759-43e2-96d8-e516627a66db",
|
|
"created": "2026-02-17T19:39:51.785313Z",
|
|
"modified": "2026-02-17T19:39:51.785313Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jakalas.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.785313Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d9b1cf9b-b12b-431d-96ab-7e5b5d6b561e",
|
|
"created": "2026-02-17T19:39:51.785684Z",
|
|
"modified": "2026-02-17T19:39:51.785684Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3be7e85f-9759-43e2-96d8-e516627a66db",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8823e233-0ba7-44ab-969c-6940e79dc17f",
|
|
"created": "2026-02-17T19:39:51.785765Z",
|
|
"modified": "2026-02-17T19:39:51.785765Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tly.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.785765Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2dd26d66-af93-4fc0-b150-9582d7b09268",
|
|
"created": "2026-02-17T19:39:51.786082Z",
|
|
"modified": "2026-02-17T19:39:51.786082Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8823e233-0ba7-44ab-969c-6940e79dc17f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--abd225f1-6362-41c4-ac3d-518a02f9ca49",
|
|
"created": "2026-02-17T19:39:51.78616Z",
|
|
"modified": "2026-02-17T19:39:51.78616Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tsapp.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.78616Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e910d7fe-fee2-45fd-89c2-289f3c488cfd",
|
|
"created": "2026-02-17T19:39:51.786481Z",
|
|
"modified": "2026-02-17T19:39:51.786481Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--abd225f1-6362-41c4-ac3d-518a02f9ca49",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--97687fd4-9fc7-4d12-85f3-3e0533a076ea",
|
|
"created": "2026-02-17T19:39:51.786561Z",
|
|
"modified": "2026-02-17T19:39:51.786561Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jofki.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.786561Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e6d07d16-22ed-4197-bff9-bee55bd52a03",
|
|
"created": "2026-02-17T19:39:51.786876Z",
|
|
"modified": "2026-02-17T19:39:51.786876Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--97687fd4-9fc7-4d12-85f3-3e0533a076ea",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7cd102ac-d8e2-4c69-80d7-3e76379a9201",
|
|
"created": "2026-02-17T19:39:51.786954Z",
|
|
"modified": "2026-02-17T19:39:51.786954Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='post-kz.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.786954Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6e36d5a6-adb0-4b64-b7df-79d37e603937",
|
|
"created": "2026-02-17T19:39:51.787278Z",
|
|
"modified": "2026-02-17T19:39:51.787278Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7cd102ac-d8e2-4c69-80d7-3e76379a9201",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5d5fe8a2-de39-4c13-bbcd-38c54c50d290",
|
|
"created": "2026-02-17T19:39:51.787354Z",
|
|
"modified": "2026-02-17T19:39:51.787354Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='almasryelyuom.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.787354Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--98b8e129-275b-4f1f-958d-1c89a5bb0b2e",
|
|
"created": "2026-02-17T19:39:51.787676Z",
|
|
"modified": "2026-02-17T19:39:51.787676Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5d5fe8a2-de39-4c13-bbcd-38c54c50d290",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f11f190f-5795-4152-bb23-52f350583576",
|
|
"created": "2026-02-17T19:39:51.787755Z",
|
|
"modified": "2026-02-17T19:39:51.787755Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tw.itter.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.787755Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c97a91cd-b88a-4770-ad80-04cf875cba9b",
|
|
"created": "2026-02-17T19:39:51.78836Z",
|
|
"modified": "2026-02-17T19:39:51.78836Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f11f190f-5795-4152-bb23-52f350583576",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6583437f-fb7e-41b4-962e-64c21c57511f",
|
|
"created": "2026-02-17T19:39:51.788439Z",
|
|
"modified": "2026-02-17T19:39:51.788439Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wha.tsapp.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.788439Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d1492ff2-56e0-4210-99d1-45da80102115",
|
|
"created": "2026-02-17T19:39:51.788753Z",
|
|
"modified": "2026-02-17T19:39:51.788753Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6583437f-fb7e-41b4-962e-64c21c57511f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--04ab9f99-9387-40da-bcd7-c8e3a995f662",
|
|
"created": "2026-02-17T19:39:51.78883Z",
|
|
"modified": "2026-02-17T19:39:51.78883Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='uberegypt.cn.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.78883Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--41cb94a2-89a2-46e7-83b4-04f5ac06b0f5",
|
|
"created": "2026-02-17T19:39:51.789194Z",
|
|
"modified": "2026-02-17T19:39:51.789194Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--04ab9f99-9387-40da-bcd7-c8e3a995f662",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7091f1f9-7255-4cf2-bc72-bfc6428a7622",
|
|
"created": "2026-02-17T19:39:51.789272Z",
|
|
"modified": "2026-02-17T19:39:51.789272Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lamborghini-s.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.789272Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4e299214-bf9f-4201-96bc-7ee4851e27b9",
|
|
"created": "2026-02-17T19:39:51.789586Z",
|
|
"modified": "2026-02-17T19:39:51.789586Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7091f1f9-7255-4cf2-bc72-bfc6428a7622",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--63ac4e24-ffd8-4c53-847a-9df9e7c625b2",
|
|
"created": "2026-02-17T19:39:51.789669Z",
|
|
"modified": "2026-02-17T19:39:51.789669Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='insurance.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.789669Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c837a59b-9d45-469a-a027-b50c0b9784bb",
|
|
"created": "2026-02-17T19:39:51.789983Z",
|
|
"modified": "2026-02-17T19:39:51.789983Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--63ac4e24-ffd8-4c53-847a-9df9e7c625b2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5cf7f300-e24e-418d-ab5e-6b35a5905c60",
|
|
"created": "2026-02-17T19:39:51.790058Z",
|
|
"modified": "2026-02-17T19:39:51.790058Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vestinfos.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.790058Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--53f45fd4-1c73-4360-ae54-bf26d7eb0b17",
|
|
"created": "2026-02-17T19:39:51.790372Z",
|
|
"modified": "2026-02-17T19:39:51.790372Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5cf7f300-e24e-418d-ab5e-6b35a5905c60",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b89bbcf2-257a-4db0-b506-ee7197d646fd",
|
|
"created": "2026-02-17T19:39:51.790447Z",
|
|
"modified": "2026-02-17T19:39:51.790447Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='podcastnow.club']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.790447Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a553925d-6cd5-4bcd-bbe9-4a84b482ce64",
|
|
"created": "2026-02-17T19:39:51.790775Z",
|
|
"modified": "2026-02-17T19:39:51.790775Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b89bbcf2-257a-4db0-b506-ee7197d646fd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ba32a101-e78b-488a-a18e-d1037d6353f2",
|
|
"created": "2026-02-17T19:39:51.790852Z",
|
|
"modified": "2026-02-17T19:39:51.790852Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sustanbuild.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.790852Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1bdc0e57-858f-4586-8369-617e9cb0b96f",
|
|
"created": "2026-02-17T19:39:51.791168Z",
|
|
"modified": "2026-02-17T19:39:51.791168Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ba32a101-e78b-488a-a18e-d1037d6353f2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b0331b32-2588-4c63-a9e2-72bed6bd96bf",
|
|
"created": "2026-02-17T19:39:51.791243Z",
|
|
"modified": "2026-02-17T19:39:51.791243Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kranos.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.791243Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f7bcd549-ecff-44b3-a65a-335e8e1cc830",
|
|
"created": "2026-02-17T19:39:51.791561Z",
|
|
"modified": "2026-02-17T19:39:51.791561Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b0331b32-2588-4c63-a9e2-72bed6bd96bf",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--83c89152-9770-4e81-8359-d7d350e698d6",
|
|
"created": "2026-02-17T19:39:51.791639Z",
|
|
"modified": "2026-02-17T19:39:51.791639Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='burgerprince.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.791639Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ffa0da53-f0e3-4d0f-beb7-cb19272a8437",
|
|
"created": "2026-02-17T19:39:51.791961Z",
|
|
"modified": "2026-02-17T19:39:51.791961Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--83c89152-9770-4e81-8359-d7d350e698d6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--42c1b8e8-3e1e-408b-8e0a-2af0b4fb94b8",
|
|
"created": "2026-02-17T19:39:51.79204Z",
|
|
"modified": "2026-02-17T19:39:51.79204Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='timeupdateservice.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.79204Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c7c0c6d6-2a4a-4a7a-bda9-8377c936401a",
|
|
"created": "2026-02-17T19:39:51.792439Z",
|
|
"modified": "2026-02-17T19:39:51.792439Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--42c1b8e8-3e1e-408b-8e0a-2af0b4fb94b8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--df9e3bec-9776-434f-955f-258a5718fe03",
|
|
"created": "2026-02-17T19:39:51.792522Z",
|
|
"modified": "2026-02-17T19:39:51.792522Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='egypt-post.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.792522Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2760b67d-9990-4e6f-aec3-58d506dde62f",
|
|
"created": "2026-02-17T19:39:51.792847Z",
|
|
"modified": "2026-02-17T19:39:51.792847Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--df9e3bec-9776-434f-955f-258a5718fe03",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7b852e1c-ffc7-42f2-8091-34997a2b30a7",
|
|
"created": "2026-02-17T19:39:51.792925Z",
|
|
"modified": "2026-02-17T19:39:51.792925Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='trecv.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.792925Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--71909806-cba9-4ffb-989f-b101e83940aa",
|
|
"created": "2026-02-17T19:39:51.793239Z",
|
|
"modified": "2026-02-17T19:39:51.793239Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7b852e1c-ffc7-42f2-8091-34997a2b30a7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b4e6c55d-9dae-4c44-8d2b-a343d39dbb39",
|
|
"created": "2026-02-17T19:39:51.793319Z",
|
|
"modified": "2026-02-17T19:39:51.793319Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='informacao24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.793319Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--662d84a0-822c-4bd4-a1f9-69dac0f9b707",
|
|
"created": "2026-02-17T19:39:51.793634Z",
|
|
"modified": "2026-02-17T19:39:51.793634Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b4e6c55d-9dae-4c44-8d2b-a343d39dbb39",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--39f2f8c5-36ec-443b-ad22-098c3274a332",
|
|
"created": "2026-02-17T19:39:51.793714Z",
|
|
"modified": "2026-02-17T19:39:51.793714Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='pastepast.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.793714Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b90cff99-b2fd-44b2-9cad-a5ec57235241",
|
|
"created": "2026-02-17T19:39:51.794028Z",
|
|
"modified": "2026-02-17T19:39:51.794028Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--39f2f8c5-36ec-443b-ad22-098c3274a332",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d0c2c44b-329f-4ea2-b0b7-8b5784c6d746",
|
|
"created": "2026-02-17T19:39:51.794106Z",
|
|
"modified": "2026-02-17T19:39:51.794106Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mujmbosnoticias.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.794106Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--11b71f91-dabc-4da6-8d4a-ea3da9a43bcf",
|
|
"created": "2026-02-17T19:39:51.794426Z",
|
|
"modified": "2026-02-17T19:39:51.794426Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d0c2c44b-329f-4ea2-b0b7-8b5784c6d746",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6d9ed241-7577-4958-a788-7367530882a9",
|
|
"created": "2026-02-17T19:39:51.794503Z",
|
|
"modified": "2026-02-17T19:39:51.794503Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='beroxe.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.794503Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--62401472-f8cf-4f83-82e6-b7459dbc2a89",
|
|
"created": "2026-02-17T19:39:51.794822Z",
|
|
"modified": "2026-02-17T19:39:51.794822Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6d9ed241-7577-4958-a788-7367530882a9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f558cb87-b65c-4979-9856-233ed18f654e",
|
|
"created": "2026-02-17T19:39:51.794902Z",
|
|
"modified": "2026-02-17T19:39:51.794902Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='teslal.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.794902Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--87d7583a-8663-4eae-9afe-e44df7f3483a",
|
|
"created": "2026-02-17T19:39:51.795222Z",
|
|
"modified": "2026-02-17T19:39:51.795222Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f558cb87-b65c-4979-9856-233ed18f654e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5d4607f3-43db-4e34-b602-4137a48a88b6",
|
|
"created": "2026-02-17T19:39:51.795304Z",
|
|
"modified": "2026-02-17T19:39:51.795304Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='guardian-tt.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.795304Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--deeda2e4-afef-4c7c-91f4-4897d4ff613a",
|
|
"created": "2026-02-17T19:39:51.795628Z",
|
|
"modified": "2026-02-17T19:39:51.795628Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5d4607f3-43db-4e34-b602-4137a48a88b6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a69e488c-0d5b-4505-9713-9a988ce782a4",
|
|
"created": "2026-02-17T19:39:51.795746Z",
|
|
"modified": "2026-02-17T19:39:51.795746Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='orangegypt.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.795746Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--43ffcf15-2914-44f0-ba3c-c548b9192db6",
|
|
"created": "2026-02-17T19:39:51.796186Z",
|
|
"modified": "2026-02-17T19:39:51.796186Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a69e488c-0d5b-4505-9713-9a988ce782a4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7371ce3b-d083-40a5-9ce1-db42a3e59d43",
|
|
"created": "2026-02-17T19:39:51.796277Z",
|
|
"modified": "2026-02-17T19:39:51.796277Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='5m5.io']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.796277Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--68224194-5860-4075-8273-2438baa288f4",
|
|
"created": "2026-02-17T19:39:51.796661Z",
|
|
"modified": "2026-02-17T19:39:51.796661Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7371ce3b-d083-40a5-9ce1-db42a3e59d43",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c657606f-5127-425e-ac03-009c60f30504",
|
|
"created": "2026-02-17T19:39:51.796745Z",
|
|
"modified": "2026-02-17T19:39:51.796745Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='almasrylayoum.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.796745Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3e05b077-f19a-4a29-ac01-795802f46f52",
|
|
"created": "2026-02-17T19:39:51.797076Z",
|
|
"modified": "2026-02-17T19:39:51.797076Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c657606f-5127-425e-ac03-009c60f30504",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--568254e7-112c-4994-ad95-e6a364d5ac7b",
|
|
"created": "2026-02-17T19:39:51.797174Z",
|
|
"modified": "2026-02-17T19:39:51.797174Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='growebservice.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.797174Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b24858ed-d2d9-440b-ac7f-ccc83cc20d8a",
|
|
"created": "2026-02-17T19:39:51.79752Z",
|
|
"modified": "2026-02-17T19:39:51.79752Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--568254e7-112c-4994-ad95-e6a364d5ac7b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--41d8d0e7-01f1-4a4a-940d-903bf26da9e1",
|
|
"created": "2026-02-17T19:39:51.7976Z",
|
|
"modified": "2026-02-17T19:39:51.7976Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='advertsservices.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.7976Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7fb97184-4606-4331-a378-e6ede0c5e323",
|
|
"created": "2026-02-17T19:39:51.797916Z",
|
|
"modified": "2026-02-17T19:39:51.797916Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--41d8d0e7-01f1-4a4a-940d-903bf26da9e1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f954ef86-ef18-4826-9b60-2dc7e5d2ac96",
|
|
"created": "2026-02-17T19:39:51.798032Z",
|
|
"modified": "2026-02-17T19:39:51.798032Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='whatssapp.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.798032Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c0272e7a-725b-471b-9afd-1319393c0e15",
|
|
"created": "2026-02-17T19:39:51.798388Z",
|
|
"modified": "2026-02-17T19:39:51.798388Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f954ef86-ef18-4826-9b60-2dc7e5d2ac96",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--da4e4152-f2c0-4ab9-ad20-00ba312d2350",
|
|
"created": "2026-02-17T19:39:51.798477Z",
|
|
"modified": "2026-02-17T19:39:51.798477Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='zakorn.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.798477Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--060676a3-f4b3-49bf-ba3c-66e4779c36c1",
|
|
"created": "2026-02-17T19:39:51.7988Z",
|
|
"modified": "2026-02-17T19:39:51.7988Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--da4e4152-f2c0-4ab9-ad20-00ba312d2350",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--af02c373-cccb-4158-8043-803c68ea393d",
|
|
"created": "2026-02-17T19:39:51.798882Z",
|
|
"modified": "2026-02-17T19:39:51.798882Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='betly.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.798882Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a3aae121-6542-4bbf-a498-a39d58137361",
|
|
"created": "2026-02-17T19:39:51.799204Z",
|
|
"modified": "2026-02-17T19:39:51.799204Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--af02c373-cccb-4158-8043-803c68ea393d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fa263945-8d9d-4d38-b4a1-c54d6fa986ce",
|
|
"created": "2026-02-17T19:39:51.799285Z",
|
|
"modified": "2026-02-17T19:39:51.799285Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='itcgr.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.799285Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4c60d911-9ab8-4c6d-8a46-8435ebd0fef9",
|
|
"created": "2026-02-17T19:39:51.799611Z",
|
|
"modified": "2026-02-17T19:39:51.799611Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fa263945-8d9d-4d38-b4a1-c54d6fa986ce",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c4416f46-78d3-4eaa-a336-a8f62fd1b166",
|
|
"created": "2026-02-17T19:39:51.7997Z",
|
|
"modified": "2026-02-17T19:39:51.7997Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='leanwithme.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.7997Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fef5b4f4-60a7-413a-8481-6af03dbd9ab4",
|
|
"created": "2026-02-17T19:39:51.800099Z",
|
|
"modified": "2026-02-17T19:39:51.800099Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c4416f46-78d3-4eaa-a336-a8f62fd1b166",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0854f12d-ff76-476d-b704-2f74da0b9894",
|
|
"created": "2026-02-17T19:39:51.800177Z",
|
|
"modified": "2026-02-17T19:39:51.800177Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lttlnk.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.800177Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--49036524-b1ce-43e9-87ce-cfe06bcb8d01",
|
|
"created": "2026-02-17T19:39:51.800513Z",
|
|
"modified": "2026-02-17T19:39:51.800513Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0854f12d-ff76-476d-b704-2f74da0b9894",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b8339132-7131-45c4-a2ab-e1903ded47e7",
|
|
"created": "2026-02-17T19:39:51.800597Z",
|
|
"modified": "2026-02-17T19:39:51.800597Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bi.tly.link']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.800597Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3b7663ba-64bd-4a1a-902a-f231d558c653",
|
|
"created": "2026-02-17T19:39:51.800912Z",
|
|
"modified": "2026-02-17T19:39:51.800912Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b8339132-7131-45c4-a2ab-e1903ded47e7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2dec5267-9366-42ad-a6e7-df3956a1a3db",
|
|
"created": "2026-02-17T19:39:51.800992Z",
|
|
"modified": "2026-02-17T19:39:51.800992Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='e-kgd.kz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.800992Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--236d2c5e-2cee-4618-bde2-1c30e2ce1b9d",
|
|
"created": "2026-02-17T19:39:51.801304Z",
|
|
"modified": "2026-02-17T19:39:51.801304Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2dec5267-9366-42ad-a6e7-df3956a1a3db",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--10e2d50d-994d-4082-95e7-a0cf810be71d",
|
|
"created": "2026-02-17T19:39:51.801389Z",
|
|
"modified": "2026-02-17T19:39:51.801389Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sysnet.life']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.801389Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ab8fe276-56ed-4f79-a2e7-c03f0955de6a",
|
|
"created": "2026-02-17T19:39:51.801713Z",
|
|
"modified": "2026-02-17T19:39:51.801713Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--10e2d50d-994d-4082-95e7-a0cf810be71d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5513c2fe-d1ce-4717-b4fd-09c2e72e2a06",
|
|
"created": "2026-02-17T19:39:51.801793Z",
|
|
"modified": "2026-02-17T19:39:51.801793Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='olxeg.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.801793Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--aaddb72d-4149-489a-8f7a-cd1b207c52e4",
|
|
"created": "2026-02-17T19:39:51.802105Z",
|
|
"modified": "2026-02-17T19:39:51.802105Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5513c2fe-d1ce-4717-b4fd-09c2e72e2a06",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c67200ed-a36a-4bfd-a82a-c354014d0895",
|
|
"created": "2026-02-17T19:39:51.802184Z",
|
|
"modified": "2026-02-17T19:39:51.802184Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='clckbck.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.802184Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b80d5b82-f401-4364-a9e4-97ec8224b1be",
|
|
"created": "2026-02-17T19:39:51.802518Z",
|
|
"modified": "2026-02-17T19:39:51.802518Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c67200ed-a36a-4bfd-a82a-c354014d0895",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c15b2b47-67e6-4a45-ac30-c64acaf776a5",
|
|
"created": "2026-02-17T19:39:51.802609Z",
|
|
"modified": "2026-02-17T19:39:51.802609Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='itter.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.802609Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--14a2dbbb-9411-4c72-aea1-d48db9c7f858",
|
|
"created": "2026-02-17T19:39:51.802938Z",
|
|
"modified": "2026-02-17T19:39:51.802938Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c15b2b47-67e6-4a45-ac30-c64acaf776a5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e45de741-1d48-4f20-abdf-20e9a315c02e",
|
|
"created": "2026-02-17T19:39:51.803019Z",
|
|
"modified": "2026-02-17T19:39:51.803019Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='aramexegypt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.803019Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--93bcbb20-0c77-483d-a1d8-3b4cd6663cc6",
|
|
"created": "2026-02-17T19:39:51.803365Z",
|
|
"modified": "2026-02-17T19:39:51.803365Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e45de741-1d48-4f20-abdf-20e9a315c02e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4ab2f3ea-c257-46e8-ab0e-c9a157b0c0a1",
|
|
"created": "2026-02-17T19:39:51.803447Z",
|
|
"modified": "2026-02-17T19:39:51.803447Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='getsignalapps.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.803447Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b9d7d124-4e25-4fed-998c-6f887242ab3a",
|
|
"created": "2026-02-17T19:39:51.803843Z",
|
|
"modified": "2026-02-17T19:39:51.803843Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4ab2f3ea-c257-46e8-ab0e-c9a157b0c0a1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c657644e-0d36-468b-b49e-c5df8125b0f6",
|
|
"created": "2026-02-17T19:39:51.803926Z",
|
|
"modified": "2026-02-17T19:39:51.803926Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ios-apps.store']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.803926Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3f2a9a28-70c2-4e4a-9371-38e0f5a7848e",
|
|
"created": "2026-02-17T19:39:51.804258Z",
|
|
"modified": "2026-02-17T19:39:51.804258Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c657644e-0d36-468b-b49e-c5df8125b0f6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8d4c3fdd-a042-406f-81a0-d41c002357b5",
|
|
"created": "2026-02-17T19:39:51.804338Z",
|
|
"modified": "2026-02-17T19:39:51.804338Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ikea-egypt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.804338Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3b2812f6-4e8a-455a-9972-d6db67aa9cef",
|
|
"created": "2026-02-17T19:39:51.804664Z",
|
|
"modified": "2026-02-17T19:39:51.804664Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8d4c3fdd-a042-406f-81a0-d41c002357b5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d7672729-a02f-4050-8f4b-998e5c314604",
|
|
"created": "2026-02-17T19:39:51.804744Z",
|
|
"modified": "2026-02-17T19:39:51.804744Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nemshi.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.804744Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--84b69ca5-57f9-44a3-a40e-83cc8b724ecf",
|
|
"created": "2026-02-17T19:39:51.805064Z",
|
|
"modified": "2026-02-17T19:39:51.805064Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d7672729-a02f-4050-8f4b-998e5c314604",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6b34cf13-fbca-4eb8-ac21-abe6cdd8ec57",
|
|
"created": "2026-02-17T19:39:51.805142Z",
|
|
"modified": "2026-02-17T19:39:51.805142Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jornaldeangola.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.805142Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3421d07a-92a5-44dc-bebe-95609bf45400",
|
|
"created": "2026-02-17T19:39:51.805468Z",
|
|
"modified": "2026-02-17T19:39:51.805468Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6b34cf13-fbca-4eb8-ac21-abe6cdd8ec57",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0c9d756f-7611-4622-aeba-598f8537b1f8",
|
|
"created": "2026-02-17T19:39:51.805546Z",
|
|
"modified": "2026-02-17T19:39:51.805546Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sepenet.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.805546Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--101e955b-2977-4863-8240-ae64e76306a0",
|
|
"created": "2026-02-17T19:39:51.805884Z",
|
|
"modified": "2026-02-17T19:39:51.805884Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0c9d756f-7611-4622-aeba-598f8537b1f8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7945732d-0cec-4445-94b1-926f33849ed6",
|
|
"created": "2026-02-17T19:39:51.805976Z",
|
|
"modified": "2026-02-17T19:39:51.805976Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mitube1.link']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.805976Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b19b36c0-5e73-4457-a563-d308f87fcb90",
|
|
"created": "2026-02-17T19:39:51.806298Z",
|
|
"modified": "2026-02-17T19:39:51.806298Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7945732d-0cec-4445-94b1-926f33849ed6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--526b9f6f-cb08-4e33-b3f0-f1fc6d34e449",
|
|
"created": "2026-02-17T19:39:51.806377Z",
|
|
"modified": "2026-02-17T19:39:51.806377Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='myfawry.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.806377Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5c632e5d-5402-4232-9464-403c915dcaea",
|
|
"created": "2026-02-17T19:39:51.806693Z",
|
|
"modified": "2026-02-17T19:39:51.806693Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--526b9f6f-cb08-4e33-b3f0-f1fc6d34e449",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cbc7bbd7-7fa5-4caf-b310-b0bec161b567",
|
|
"created": "2026-02-17T19:39:51.806771Z",
|
|
"modified": "2026-02-17T19:39:51.806771Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newsbeast.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.806771Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a2dddda0-ba60-40eb-9c56-af4ebcbb336c",
|
|
"created": "2026-02-17T19:39:51.807086Z",
|
|
"modified": "2026-02-17T19:39:51.807086Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cbc7bbd7-7fa5-4caf-b310-b0bec161b567",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5f3c0a49-0824-474b-91a0-006b9771c437",
|
|
"created": "2026-02-17T19:39:51.807165Z",
|
|
"modified": "2026-02-17T19:39:51.807165Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='factosdiarios.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.807165Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--42932836-52ef-495d-815e-ec8bd4b3e0ba",
|
|
"created": "2026-02-17T19:39:51.807555Z",
|
|
"modified": "2026-02-17T19:39:51.807555Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5f3c0a49-0824-474b-91a0-006b9771c437",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6cf24499-06fd-4cf3-a787-0cbc58c7784e",
|
|
"created": "2026-02-17T19:39:51.807635Z",
|
|
"modified": "2026-02-17T19:39:51.807635Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='plastictoysworld.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.807635Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--50e40f0d-306a-4365-bf2b-8c6ddaabfeb4",
|
|
"created": "2026-02-17T19:39:51.807946Z",
|
|
"modified": "2026-02-17T19:39:51.807946Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6cf24499-06fd-4cf3-a787-0cbc58c7784e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b1706419-a743-4435-848c-7377781089db",
|
|
"created": "2026-02-17T19:39:51.808023Z",
|
|
"modified": "2026-02-17T19:39:51.808023Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='getupdatesnow.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.808023Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--85e84520-f9e4-4498-b0ff-64a0e9639c83",
|
|
"created": "2026-02-17T19:39:51.808333Z",
|
|
"modified": "2026-02-17T19:39:51.808333Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b1706419-a743-4435-848c-7377781089db",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b616ea38-2e78-4fa2-91da-3d918ac1728e",
|
|
"created": "2026-02-17T19:39:51.808411Z",
|
|
"modified": "2026-02-17T19:39:51.808411Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='yo.utube.digital']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.808411Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--70878c5e-309e-4fd5-a5e9-f1bf171fee82",
|
|
"created": "2026-02-17T19:39:51.80872Z",
|
|
"modified": "2026-02-17T19:39:51.80872Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b616ea38-2e78-4fa2-91da-3d918ac1728e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2c425214-d01a-4584-a63f-c62f848f485f",
|
|
"created": "2026-02-17T19:39:51.808802Z",
|
|
"modified": "2026-02-17T19:39:51.808802Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sinai-new.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.808802Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--232d6905-8adc-4d81-a3c1-6e362d09594d",
|
|
"created": "2026-02-17T19:39:51.809112Z",
|
|
"modified": "2026-02-17T19:39:51.809112Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2c425214-d01a-4584-a63f-c62f848f485f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b0215fbe-8018-4257-a9a1-28b7d235e82b",
|
|
"created": "2026-02-17T19:39:51.809189Z",
|
|
"modified": "2026-02-17T19:39:51.809189Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='informationrank.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.809189Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--97a484fc-d4b2-493d-807f-7606e636943e",
|
|
"created": "2026-02-17T19:39:51.809504Z",
|
|
"modified": "2026-02-17T19:39:51.809504Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b0215fbe-8018-4257-a9a1-28b7d235e82b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--082b63d4-7b1f-46f7-821b-d00bbee1b3a3",
|
|
"created": "2026-02-17T19:39:51.809585Z",
|
|
"modified": "2026-02-17T19:39:51.809585Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cabinet-salyk.kz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.809585Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c450c6aa-cfaf-4963-a542-6c169deca626",
|
|
"created": "2026-02-17T19:39:51.809902Z",
|
|
"modified": "2026-02-17T19:39:51.809902Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--082b63d4-7b1f-46f7-821b-d00bbee1b3a3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c1019cc4-1ddb-4304-9ce8-a65fd5a7c4c9",
|
|
"created": "2026-02-17T19:39:51.809981Z",
|
|
"modified": "2026-02-17T19:39:51.809981Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='carrefourmisr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.809981Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--77fc673b-6599-4a98-ae33-9a5abc1cc1bb",
|
|
"created": "2026-02-17T19:39:51.810295Z",
|
|
"modified": "2026-02-17T19:39:51.810295Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c1019cc4-1ddb-4304-9ce8-a65fd5a7c4c9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e832d23e-f57b-4610-9b72-8294bc95085d",
|
|
"created": "2026-02-17T19:39:51.810376Z",
|
|
"modified": "2026-02-17T19:39:51.810376Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bit-li.ws']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.810376Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--09fba357-53e7-447b-a506-511f6764da92",
|
|
"created": "2026-02-17T19:39:51.810689Z",
|
|
"modified": "2026-02-17T19:39:51.810689Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e832d23e-f57b-4610-9b72-8294bc95085d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--13011340-9ad4-4122-ab5e-0d1d9a41b4f4",
|
|
"created": "2026-02-17T19:39:51.810768Z",
|
|
"modified": "2026-02-17T19:39:51.810768Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nikjol.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.810768Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--897bb4ea-5170-4bbf-972c-a5a386153144",
|
|
"created": "2026-02-17T19:39:51.811153Z",
|
|
"modified": "2026-02-17T19:39:51.811153Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--13011340-9ad4-4122-ab5e-0d1d9a41b4f4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--94ce3c36-20ad-49a4-a11a-fb0db23d5cb8",
|
|
"created": "2026-02-17T19:39:51.811235Z",
|
|
"modified": "2026-02-17T19:39:51.811235Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='landingpge.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.811235Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a857992d-9916-4711-9cfc-c91e9fd1a9a1",
|
|
"created": "2026-02-17T19:39:51.811538Z",
|
|
"modified": "2026-02-17T19:39:51.811538Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--94ce3c36-20ad-49a4-a11a-fb0db23d5cb8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6e96e6d8-6642-4c7c-ba84-2aae19d6dcbf",
|
|
"created": "2026-02-17T19:39:51.811612Z",
|
|
"modified": "2026-02-17T19:39:51.811612Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vaovao.soutien-a-rajoelina.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.811612Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7dd62e77-7b44-4019-8866-9a1d0ae43c32",
|
|
"created": "2026-02-17T19:39:51.811919Z",
|
|
"modified": "2026-02-17T19:39:51.811919Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6e96e6d8-6642-4c7c-ba84-2aae19d6dcbf",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cf6750e8-8241-4b9b-9bd1-8374401c6632",
|
|
"created": "2026-02-17T19:39:51.811994Z",
|
|
"modified": "2026-02-17T19:39:51.811994Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ancienthistory.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.811994Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2f0f8c9d-9273-471d-b5b8-16b19b88c25d",
|
|
"created": "2026-02-17T19:39:51.812294Z",
|
|
"modified": "2026-02-17T19:39:51.812294Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cf6750e8-8241-4b9b-9bd1-8374401c6632",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--85169d1a-00d2-4d0b-9cdb-f24349ff317c",
|
|
"created": "2026-02-17T19:39:51.812371Z",
|
|
"modified": "2026-02-17T19:39:51.812371Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kinder.engine.ninja']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.812371Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--08835c1d-6779-4c55-9028-123c56ca2f6b",
|
|
"created": "2026-02-17T19:39:51.812673Z",
|
|
"modified": "2026-02-17T19:39:51.812673Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--85169d1a-00d2-4d0b-9cdb-f24349ff317c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f60239f3-787f-4730-9246-9c760d0b3c4f",
|
|
"created": "2026-02-17T19:39:51.812747Z",
|
|
"modified": "2026-02-17T19:39:51.812747Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='clcti.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.812747Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b33469ac-1207-4ec2-8e2f-0459fb6367f0",
|
|
"created": "2026-02-17T19:39:51.813053Z",
|
|
"modified": "2026-02-17T19:39:51.813053Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f60239f3-787f-4730-9246-9c760d0b3c4f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cca78e74-e57a-4390-9871-cb94cb7a5dad",
|
|
"created": "2026-02-17T19:39:51.813127Z",
|
|
"modified": "2026-02-17T19:39:51.813127Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tclnk.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.813127Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--474e6f93-3037-47c5-afa1-b5cc65b144a3",
|
|
"created": "2026-02-17T19:39:51.813418Z",
|
|
"modified": "2026-02-17T19:39:51.813418Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cca78e74-e57a-4390-9871-cb94cb7a5dad",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1f085d7d-b623-4699-a502-2df0c80d0b1c",
|
|
"created": "2026-02-17T19:39:51.813493Z",
|
|
"modified": "2026-02-17T19:39:51.813493Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='koora-egypt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.813493Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--229bf392-14fc-4098-bf44-820e984f757a",
|
|
"created": "2026-02-17T19:39:51.813792Z",
|
|
"modified": "2026-02-17T19:39:51.813792Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1f085d7d-b623-4699-a502-2df0c80d0b1c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--80a1a053-5d86-4f97-bb88-6ac369d3152a",
|
|
"created": "2026-02-17T19:39:51.813867Z",
|
|
"modified": "2026-02-17T19:39:51.813867Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='weather-live.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.813867Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e7e18a8a-00df-4863-be78-6df1325c38c1",
|
|
"created": "2026-02-17T19:39:51.814193Z",
|
|
"modified": "2026-02-17T19:39:51.814193Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--80a1a053-5d86-4f97-bb88-6ac369d3152a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--41f72118-23f5-4efc-ac33-5ec559305a7c",
|
|
"created": "2026-02-17T19:39:51.814277Z",
|
|
"modified": "2026-02-17T19:39:51.814277Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sky-news.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.814277Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f399e82b-b1be-4f29-a9ee-b83828815c1e",
|
|
"created": "2026-02-17T19:39:51.814662Z",
|
|
"modified": "2026-02-17T19:39:51.814662Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--41f72118-23f5-4efc-ac33-5ec559305a7c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d876a4a7-aff4-48d8-81da-f0e9335eed6c",
|
|
"created": "2026-02-17T19:39:51.814743Z",
|
|
"modified": "2026-02-17T19:39:51.814743Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='intercontinentalhg.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.814743Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--639b3580-3ef9-41ce-ab59-02ec5008e739",
|
|
"created": "2026-02-17T19:39:51.815058Z",
|
|
"modified": "2026-02-17T19:39:51.815058Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d876a4a7-aff4-48d8-81da-f0e9335eed6c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2a41ea27-d8cd-4118-85a4-0e3bc313f070",
|
|
"created": "2026-02-17T19:39:51.815134Z",
|
|
"modified": "2026-02-17T19:39:51.815134Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lubentv.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.815134Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c46cb964-f87b-4a5f-8340-90a096900d22",
|
|
"created": "2026-02-17T19:39:51.815431Z",
|
|
"modified": "2026-02-17T19:39:51.815431Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2a41ea27-d8cd-4118-85a4-0e3bc313f070",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fd221cdb-9366-4ffd-995f-19be86f40d02",
|
|
"created": "2026-02-17T19:39:51.815507Z",
|
|
"modified": "2026-02-17T19:39:51.815507Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='quick-ads.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.815507Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--95b05038-cd41-4b61-8261-69269744f93c",
|
|
"created": "2026-02-17T19:39:51.815803Z",
|
|
"modified": "2026-02-17T19:39:51.815803Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fd221cdb-9366-4ffd-995f-19be86f40d02",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cf8a78a4-08b9-4403-b93b-682b964d6b94",
|
|
"created": "2026-02-17T19:39:51.815882Z",
|
|
"modified": "2026-02-17T19:39:51.815882Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cloudstatistics.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.815882Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--de1f3a29-5d55-405b-ac22-d52412d506d3",
|
|
"created": "2026-02-17T19:39:51.816182Z",
|
|
"modified": "2026-02-17T19:39:51.816182Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cf8a78a4-08b9-4403-b93b-682b964d6b94",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--daf075e7-5d0a-4a44-84ee-1dec6398d68b",
|
|
"created": "2026-02-17T19:39:51.816257Z",
|
|
"modified": "2026-02-17T19:39:51.816257Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='otaupdatesios.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.816257Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--07c0975e-c28d-4a1b-9097-4964e93f396f",
|
|
"created": "2026-02-17T19:39:51.816553Z",
|
|
"modified": "2026-02-17T19:39:51.816553Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--daf075e7-5d0a-4a44-84ee-1dec6398d68b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--48f20b9b-bb08-4225-a9fd-d14becd62cc4",
|
|
"created": "2026-02-17T19:39:51.816627Z",
|
|
"modified": "2026-02-17T19:39:51.816627Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tokoulouri.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.816627Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4f951db7-cb91-46d5-b4c4-59c4749c2db2",
|
|
"created": "2026-02-17T19:39:51.81692Z",
|
|
"modified": "2026-02-17T19:39:51.81692Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--48f20b9b-bb08-4225-a9fd-d14becd62cc4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--70ff9976-a9af-442a-b756-2c67f8648588",
|
|
"created": "2026-02-17T19:39:51.816994Z",
|
|
"modified": "2026-02-17T19:39:51.816994Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='hempower.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.816994Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9b3c4e45-4a36-43aa-b347-8730f9806b5d",
|
|
"created": "2026-02-17T19:39:51.817346Z",
|
|
"modified": "2026-02-17T19:39:51.817346Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--70ff9976-a9af-442a-b756-2c67f8648588",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8c18f172-9c03-402e-8e81-c95fcb3f4ca3",
|
|
"created": "2026-02-17T19:39:51.817421Z",
|
|
"modified": "2026-02-17T19:39:51.817421Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gorows.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.817421Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--14c3df9c-d714-4b5a-bf06-616fc9c28d6f",
|
|
"created": "2026-02-17T19:39:51.817713Z",
|
|
"modified": "2026-02-17T19:39:51.817713Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8c18f172-9c03-402e-8e81-c95fcb3f4ca3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--45e8b845-a760-4778-93e3-1a3ea183c97d",
|
|
"created": "2026-02-17T19:39:51.817787Z",
|
|
"modified": "2026-02-17T19:39:51.817787Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='elwatnanews.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.817787Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1f9f8746-b7da-4549-8e34-6381cfc104f6",
|
|
"created": "2026-02-17T19:39:51.818147Z",
|
|
"modified": "2026-02-17T19:39:51.818147Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--45e8b845-a760-4778-93e3-1a3ea183c97d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--23405234-2cbb-438f-b95f-4134d4d30261",
|
|
"created": "2026-02-17T19:39:51.818224Z",
|
|
"modified": "2026-02-17T19:39:51.818224Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='traffic-moi-eg.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.818224Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0a25c3e2-814b-423d-8090-6d1d5d597781",
|
|
"created": "2026-02-17T19:39:51.818523Z",
|
|
"modified": "2026-02-17T19:39:51.818523Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--23405234-2cbb-438f-b95f-4134d4d30261",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bede10ce-fe1f-439c-8edd-cdf792ada0c8",
|
|
"created": "2026-02-17T19:39:51.818597Z",
|
|
"modified": "2026-02-17T19:39:51.818597Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='dealstransfer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.818597Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1f1a1f0d-e1ff-4167-9c4f-0ed558a5386c",
|
|
"created": "2026-02-17T19:39:51.818936Z",
|
|
"modified": "2026-02-17T19:39:51.818936Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bede10ce-fe1f-439c-8edd-cdf792ada0c8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0b6c08c4-8f2a-45bb-8f12-e29c62fc5ea8",
|
|
"created": "2026-02-17T19:39:51.819011Z",
|
|
"modified": "2026-02-17T19:39:51.819011Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='linkit.cloud']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.819011Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8b32de80-aab6-48d0-801e-7a397a967c15",
|
|
"created": "2026-02-17T19:39:51.819303Z",
|
|
"modified": "2026-02-17T19:39:51.819303Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0b6c08c4-8f2a-45bb-8f12-e29c62fc5ea8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6597903e-016c-4936-92f2-06ca59623cb0",
|
|
"created": "2026-02-17T19:39:51.819377Z",
|
|
"modified": "2026-02-17T19:39:51.819377Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='guardnew.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.819377Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--13944b19-2b4c-45af-89bf-4cbb772ff976",
|
|
"created": "2026-02-17T19:39:51.819673Z",
|
|
"modified": "2026-02-17T19:39:51.819673Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6597903e-016c-4936-92f2-06ca59623cb0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a1166588-23aa-48da-8f1a-901527b81f0c",
|
|
"created": "2026-02-17T19:39:51.819746Z",
|
|
"modified": "2026-02-17T19:39:51.819746Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bit-ly.link']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.819746Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4ecb93d0-77dc-4bda-b4b0-012066cc6a5b",
|
|
"created": "2026-02-17T19:39:51.820034Z",
|
|
"modified": "2026-02-17T19:39:51.820034Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a1166588-23aa-48da-8f1a-901527b81f0c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fea8b8f5-8070-4821-81fd-7d673f1f2483",
|
|
"created": "2026-02-17T19:39:51.820108Z",
|
|
"modified": "2026-02-17T19:39:51.820108Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tengrinnews.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.820108Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--619af91a-e1be-4bff-9995-e062b9f02382",
|
|
"created": "2026-02-17T19:39:51.820404Z",
|
|
"modified": "2026-02-17T19:39:51.820404Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fea8b8f5-8070-4821-81fd-7d673f1f2483",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1bb2fba4-6dd8-4f3e-868d-30b70a82b30f",
|
|
"created": "2026-02-17T19:39:51.820478Z",
|
|
"modified": "2026-02-17T19:39:51.820478Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='informburo.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.820478Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dfe9561d-20ee-442a-8a23-cdcb96035fe7",
|
|
"created": "2026-02-17T19:39:51.820769Z",
|
|
"modified": "2026-02-17T19:39:51.820769Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1bb2fba4-6dd8-4f3e-868d-30b70a82b30f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dcc1fb52-d5e4-4d21-8732-335aea699330",
|
|
"created": "2026-02-17T19:39:51.820842Z",
|
|
"modified": "2026-02-17T19:39:51.820842Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='pocopoc.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.820842Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3d5e8687-5d6f-40b9-b727-c1f7e44fbece",
|
|
"created": "2026-02-17T19:39:51.821134Z",
|
|
"modified": "2026-02-17T19:39:51.821134Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dcc1fb52-d5e4-4d21-8732-335aea699330",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--734294bc-5472-4eec-a449-a8fd626e8e1f",
|
|
"created": "2026-02-17T19:39:51.821213Z",
|
|
"modified": "2026-02-17T19:39:51.821213Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='9o.gg']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.821213Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f5e274af-bcb4-4fb2-be6a-1dabc036d158",
|
|
"created": "2026-02-17T19:39:51.821599Z",
|
|
"modified": "2026-02-17T19:39:51.821599Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--734294bc-5472-4eec-a449-a8fd626e8e1f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--14c08894-6ebc-4c9f-b457-826b3d1a78ff",
|
|
"created": "2026-02-17T19:39:51.821675Z",
|
|
"modified": "2026-02-17T19:39:51.821675Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='get-location.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.821675Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cae7689d-5d99-4892-a5b1-74185eda9d61",
|
|
"created": "2026-02-17T19:39:51.821972Z",
|
|
"modified": "2026-02-17T19:39:51.821972Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--14c08894-6ebc-4c9f-b457-826b3d1a78ff",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5f6c2917-f6e4-4676-a46a-de27f7b9943b",
|
|
"created": "2026-02-17T19:39:51.822046Z",
|
|
"modified": "2026-02-17T19:39:51.822046Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='midi-madgasikara.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.822046Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--da7918b0-6ce8-4208-9134-7f3f19fa1b9b",
|
|
"created": "2026-02-17T19:39:51.822344Z",
|
|
"modified": "2026-02-17T19:39:51.822344Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5f6c2917-f6e4-4676-a46a-de27f7b9943b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2252e2dc-9b80-4ed9-b092-b9c53ae5c0ff",
|
|
"created": "2026-02-17T19:39:51.82242Z",
|
|
"modified": "2026-02-17T19:39:51.82242Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sniper.pet']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.82242Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--79eda47d-3fee-40db-a533-073e21600633",
|
|
"created": "2026-02-17T19:39:51.82273Z",
|
|
"modified": "2026-02-17T19:39:51.82273Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2252e2dc-9b80-4ed9-b092-b9c53ae5c0ff",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a0d073ca-9356-4a1f-a0f2-5c2a3e1f5300",
|
|
"created": "2026-02-17T19:39:51.822804Z",
|
|
"modified": "2026-02-17T19:39:51.822804Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='charmander.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.822804Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--130bc9c3-7051-4b9c-af16-a49be8b5c933",
|
|
"created": "2026-02-17T19:39:51.823095Z",
|
|
"modified": "2026-02-17T19:39:51.823095Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a0d073ca-9356-4a1f-a0f2-5c2a3e1f5300",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--40e4da23-8a62-4152-8911-11f3dd2a2505",
|
|
"created": "2026-02-17T19:39:51.823168Z",
|
|
"modified": "2026-02-17T19:39:51.823168Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='flowercafee.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.823168Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8302e2c7-1f85-4d13-bbca-6e4a8e2fbe57",
|
|
"created": "2026-02-17T19:39:51.823464Z",
|
|
"modified": "2026-02-17T19:39:51.823464Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--40e4da23-8a62-4152-8911-11f3dd2a2505",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6bd16ce3-6921-41ef-ba53-8c6b63a9cac6",
|
|
"created": "2026-02-17T19:39:51.823537Z",
|
|
"modified": "2026-02-17T19:39:51.823537Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jornalf8.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.823537Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9758318c-ec96-49eb-aaa8-4395986679b5",
|
|
"created": "2026-02-17T19:39:51.823828Z",
|
|
"modified": "2026-02-17T19:39:51.823828Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6bd16ce3-6921-41ef-ba53-8c6b63a9cac6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d27ea4c5-799f-4420-968c-f7c61b6ef669",
|
|
"created": "2026-02-17T19:39:51.823902Z",
|
|
"modified": "2026-02-17T19:39:51.823902Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sicnoticia.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.823902Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7ced1329-3073-4b2e-9f01-6251bfa20c99",
|
|
"created": "2026-02-17T19:39:51.824198Z",
|
|
"modified": "2026-02-17T19:39:51.824198Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d27ea4c5-799f-4420-968c-f7c61b6ef669",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a74da0dc-a90d-4850-b497-76f7a0875a14",
|
|
"created": "2026-02-17T19:39:51.824272Z",
|
|
"modified": "2026-02-17T19:39:51.824272Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mult.icaixa.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.824272Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--106b483c-4143-49f9-9b3f-2add49e851c7",
|
|
"created": "2026-02-17T19:39:51.824572Z",
|
|
"modified": "2026-02-17T19:39:51.824572Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a74da0dc-a90d-4850-b497-76f7a0875a14",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--61995679-f5ff-4a72-8e44-f664dbb149cc",
|
|
"created": "2026-02-17T19:39:51.824646Z",
|
|
"modified": "2026-02-17T19:39:51.824646Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='clubs-k.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.824646Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--685f11c4-5b47-473d-96bb-29c81942452a",
|
|
"created": "2026-02-17T19:39:51.825001Z",
|
|
"modified": "2026-02-17T19:39:51.825001Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--61995679-f5ff-4a72-8e44-f664dbb149cc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--04c53c45-89a3-45de-94ab-9f57acdcacf9",
|
|
"created": "2026-02-17T19:39:51.825075Z",
|
|
"modified": "2026-02-17T19:39:51.825075Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='download4you.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.825075Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--30c016c1-0c93-49a7-b131-d6342fbd57fa",
|
|
"created": "2026-02-17T19:39:51.825376Z",
|
|
"modified": "2026-02-17T19:39:51.825376Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--04c53c45-89a3-45de-94ab-9f57acdcacf9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d32506a6-2f59-464e-84ef-3e0f039e2e13",
|
|
"created": "2026-02-17T19:39:51.825452Z",
|
|
"modified": "2026-02-17T19:39:51.825452Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='pdfviewer.app']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.825452Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ab6d8141-e6c7-47ba-921d-96f3801ddc23",
|
|
"created": "2026-02-17T19:39:51.825746Z",
|
|
"modified": "2026-02-17T19:39:51.825746Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d32506a6-2f59-464e-84ef-3e0f039e2e13",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b2a80316-dc42-4abe-ae57-028c5a460ade",
|
|
"created": "2026-02-17T19:39:51.82582Z",
|
|
"modified": "2026-02-17T19:39:51.82582Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='spacsaver.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.82582Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9fef98b9-4d5c-4614-bc13-b7774c36af38",
|
|
"created": "2026-02-17T19:39:51.826118Z",
|
|
"modified": "2026-02-17T19:39:51.826118Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b2a80316-dc42-4abe-ae57-028c5a460ade",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--35c01c94-1838-4489-98de-dae90d798f06",
|
|
"created": "2026-02-17T19:39:51.826192Z",
|
|
"modified": "2026-02-17T19:39:51.826192Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wts-app.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.826192Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--94da731d-80a0-4261-8f6c-2ace11f35696",
|
|
"created": "2026-02-17T19:39:51.826483Z",
|
|
"modified": "2026-02-17T19:39:51.826483Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--35c01c94-1838-4489-98de-dae90d798f06",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bd269e48-f1a1-4326-93a8-681e9c2e8cb2",
|
|
"created": "2026-02-17T19:39:51.826562Z",
|
|
"modified": "2026-02-17T19:39:51.826562Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='contents-domain.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.826562Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9075a0a7-74dc-4301-9c52-e9264bca6225",
|
|
"created": "2026-02-17T19:39:51.826859Z",
|
|
"modified": "2026-02-17T19:39:51.826859Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bd269e48-f1a1-4326-93a8-681e9c2e8cb2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--02d7dec7-c0af-49b8-9e82-ddd2b82fe1bd",
|
|
"created": "2026-02-17T19:39:51.826933Z",
|
|
"modified": "2026-02-17T19:39:51.826933Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='chatwithme.store']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.826933Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8733e1a5-e276-40d6-a36e-7153784b5b48",
|
|
"created": "2026-02-17T19:39:51.827228Z",
|
|
"modified": "2026-02-17T19:39:51.827228Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--02d7dec7-c0af-49b8-9e82-ddd2b82fe1bd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--12f0ee02-9aa5-4ae5-baae-150c74399ace",
|
|
"created": "2026-02-17T19:39:51.827302Z",
|
|
"modified": "2026-02-17T19:39:51.827302Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cibeg.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.827302Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f41b498e-6fc6-4ffc-a99d-55588fa69b8a",
|
|
"created": "2026-02-17T19:39:51.82761Z",
|
|
"modified": "2026-02-17T19:39:51.82761Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--12f0ee02-9aa5-4ae5-baae-150c74399ace",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77993265-21bc-496c-8f78-f5c1eb306c37",
|
|
"created": "2026-02-17T19:39:51.827685Z",
|
|
"modified": "2026-02-17T19:39:51.827685Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='politika.bid']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.827685Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d9e57d40-4132-46e9-b5b3-d31287740cb2",
|
|
"created": "2026-02-17T19:39:51.827978Z",
|
|
"modified": "2026-02-17T19:39:51.827978Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--77993265-21bc-496c-8f78-f5c1eb306c37",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9cad3921-4f56-4f6e-b3de-48d9d452d2be",
|
|
"created": "2026-02-17T19:39:51.828052Z",
|
|
"modified": "2026-02-17T19:39:51.828052Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='rcuples.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.828052Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8938fb81-7729-4c6d-9519-77c844bd728c",
|
|
"created": "2026-02-17T19:39:51.828449Z",
|
|
"modified": "2026-02-17T19:39:51.828449Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9cad3921-4f56-4f6e-b3de-48d9d452d2be",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--79b89580-08f0-454e-a07e-d4e28b768896",
|
|
"created": "2026-02-17T19:39:51.828525Z",
|
|
"modified": "2026-02-17T19:39:51.828525Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fastdownload.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.828525Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--becfee50-fe86-4b9c-8dfb-d7d5b105c4d8",
|
|
"created": "2026-02-17T19:39:51.828821Z",
|
|
"modified": "2026-02-17T19:39:51.828821Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--79b89580-08f0-454e-a07e-d4e28b768896",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6a6d4146-de18-460a-b739-c4a43e1bfc00",
|
|
"created": "2026-02-17T19:39:51.828896Z",
|
|
"modified": "2026-02-17T19:39:51.828896Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='teslali.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.828896Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ecab1e27-d216-4fef-bceb-bcade954ac1a",
|
|
"created": "2026-02-17T19:39:51.829186Z",
|
|
"modified": "2026-02-17T19:39:51.829186Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6a6d4146-de18-460a-b739-c4a43e1bfc00",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--94c781d6-8902-4e10-a781-2c6246f09334",
|
|
"created": "2026-02-17T19:39:51.82926Z",
|
|
"modified": "2026-02-17T19:39:51.82926Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vslojasvendas.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.82926Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--623943b9-4716-4d01-8cc2-cf28348034a5",
|
|
"created": "2026-02-17T19:39:51.829555Z",
|
|
"modified": "2026-02-17T19:39:51.829555Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--94c781d6-8902-4e10-a781-2c6246f09334",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ab03c14a-78d0-455b-9db4-9edc7c7d70f2",
|
|
"created": "2026-02-17T19:39:51.829629Z",
|
|
"modified": "2026-02-17T19:39:51.829629Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='flexipagez.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.829629Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--49edf83d-0bc7-44c7-bbd5-cdb6b8a4c33e",
|
|
"created": "2026-02-17T19:39:51.829921Z",
|
|
"modified": "2026-02-17T19:39:51.829921Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ab03c14a-78d0-455b-9db4-9edc7c7d70f2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5a2aa0bd-ff83-4fda-a49d-6f15dbeb3cab",
|
|
"created": "2026-02-17T19:39:51.829997Z",
|
|
"modified": "2026-02-17T19:39:51.829997Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vlast-news.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.829997Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--864f4261-1181-415e-a0e3-d27a3b0780eb",
|
|
"created": "2026-02-17T19:39:51.830292Z",
|
|
"modified": "2026-02-17T19:39:51.830292Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5a2aa0bd-ff83-4fda-a49d-6f15dbeb3cab",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--411da8ab-2be5-4a8e-a622-5c9ab7695a4a",
|
|
"created": "2026-02-17T19:39:51.830366Z",
|
|
"modified": "2026-02-17T19:39:51.830366Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tinylinks.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.830366Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b804e052-5769-44a4-880e-2e4d343a4d37",
|
|
"created": "2026-02-17T19:39:51.830659Z",
|
|
"modified": "2026-02-17T19:39:51.830659Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--411da8ab-2be5-4a8e-a622-5c9ab7695a4a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56a9038c-9006-40d3-bbe6-749bf17df7da",
|
|
"created": "2026-02-17T19:39:51.830736Z",
|
|
"modified": "2026-02-17T19:39:51.830736Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='2-gis.kz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.830736Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--01fa0902-31fb-45c6-8bfc-3e67bf2e7f0f",
|
|
"created": "2026-02-17T19:39:51.831083Z",
|
|
"modified": "2026-02-17T19:39:51.831083Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--56a9038c-9006-40d3-bbe6-749bf17df7da",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--de87886c-1187-4206-b42e-03ab84b9b03d",
|
|
"created": "2026-02-17T19:39:51.831161Z",
|
|
"modified": "2026-02-17T19:39:51.831161Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='addons.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.831161Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--44b7e883-8d62-4163-9a94-fd98ea75af3a",
|
|
"created": "2026-02-17T19:39:51.831452Z",
|
|
"modified": "2026-02-17T19:39:51.831452Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--de87886c-1187-4206-b42e-03ab84b9b03d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7e372b0e-48be-44f0-b606-db478c4bddfb",
|
|
"created": "2026-02-17T19:39:51.831526Z",
|
|
"modified": "2026-02-17T19:39:51.831526Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mozillaupdate.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.831526Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--46e7dc7e-61c2-4dfc-916c-2bd90179dba5",
|
|
"created": "2026-02-17T19:39:51.832055Z",
|
|
"modified": "2026-02-17T19:39:51.832055Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7e372b0e-48be-44f0-b606-db478c4bddfb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--428deb16-c53e-484c-bd19-66f3d55dd04f",
|
|
"created": "2026-02-17T19:39:51.832131Z",
|
|
"modified": "2026-02-17T19:39:51.832131Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='goldescent.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.832131Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--45c0bde4-cfa1-4243-afdf-74f0ee36f901",
|
|
"created": "2026-02-17T19:39:51.832426Z",
|
|
"modified": "2026-02-17T19:39:51.832426Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--428deb16-c53e-484c-bd19-66f3d55dd04f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7954b63d-3678-418d-b5bd-6c3877f0069b",
|
|
"created": "2026-02-17T19:39:51.832502Z",
|
|
"modified": "2026-02-17T19:39:51.832502Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='z2a.digital']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.832502Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--43ed68a4-9e6d-4d28-857a-888851ca6436",
|
|
"created": "2026-02-17T19:39:51.832795Z",
|
|
"modified": "2026-02-17T19:39:51.832795Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7954b63d-3678-418d-b5bd-6c3877f0069b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9750013b-5fb6-47a5-9acb-7a4ff603afd0",
|
|
"created": "2026-02-17T19:39:51.83287Z",
|
|
"modified": "2026-02-17T19:39:51.83287Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='telecomegy-ads.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.83287Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--42338d8c-be1e-4e61-91ac-b2608b976aa9",
|
|
"created": "2026-02-17T19:39:51.833171Z",
|
|
"modified": "2026-02-17T19:39:51.833171Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9750013b-5fb6-47a5-9acb-7a4ff603afd0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--39a14285-0a78-40c2-8bbf-d6564a014771",
|
|
"created": "2026-02-17T19:39:51.833247Z",
|
|
"modified": "2026-02-17T19:39:51.833247Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='etisalategypt.tech']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.833247Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6fbb2bc1-8b37-49c6-925f-7722a4680896",
|
|
"created": "2026-02-17T19:39:51.833541Z",
|
|
"modified": "2026-02-17T19:39:51.833541Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--39a14285-0a78-40c2-8bbf-d6564a014771",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ba1a9579-e182-4101-8849-c9645b661903",
|
|
"created": "2026-02-17T19:39:51.833616Z",
|
|
"modified": "2026-02-17T19:39:51.833616Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tovima.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.833616Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e92bb74c-008d-4830-b402-8fecf49917a5",
|
|
"created": "2026-02-17T19:39:51.833905Z",
|
|
"modified": "2026-02-17T19:39:51.833905Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ba1a9579-e182-4101-8849-c9645b661903",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ad99f4bc-9471-4388-b919-8ce927d53149",
|
|
"created": "2026-02-17T19:39:51.83398Z",
|
|
"modified": "2026-02-17T19:39:51.83398Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mmegi.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.83398Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e79e1266-83c4-49ba-8bff-5b85f3a8e6a7",
|
|
"created": "2026-02-17T19:39:51.834266Z",
|
|
"modified": "2026-02-17T19:39:51.834266Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ad99f4bc-9471-4388-b919-8ce927d53149",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8aa1ae93-dd0a-4cf3-8b41-dab8d29770a8",
|
|
"created": "2026-02-17T19:39:51.83434Z",
|
|
"modified": "2026-02-17T19:39:51.83434Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='soccer-bw.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.83434Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8673e64b-0180-4add-b43b-69385c0ae862",
|
|
"created": "2026-02-17T19:39:51.834633Z",
|
|
"modified": "2026-02-17T19:39:51.834633Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8aa1ae93-dd0a-4cf3-8b41-dab8d29770a8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--85bc0e70-f512-4fa4-9a82-ef2d388b31d4",
|
|
"created": "2026-02-17T19:39:51.834709Z",
|
|
"modified": "2026-02-17T19:39:51.834709Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='notify-service.biz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.834709Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f1126aec-cac1-437f-a415-6184fc904025",
|
|
"created": "2026-02-17T19:39:51.83501Z",
|
|
"modified": "2026-02-17T19:39:51.83501Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--85bc0e70-f512-4fa4-9a82-ef2d388b31d4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--569042bf-c76e-422b-8aaf-45d0d15aa947",
|
|
"created": "2026-02-17T19:39:51.835086Z",
|
|
"modified": "2026-02-17T19:39:51.835086Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='yo.utube.to']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.835086Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e09b98da-0235-4c9e-be17-dd395e8cdb57",
|
|
"created": "2026-02-17T19:39:51.835378Z",
|
|
"modified": "2026-02-17T19:39:51.835378Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--569042bf-c76e-422b-8aaf-45d0d15aa947",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1e301913-61a8-41a6-834d-179d689bc9cb",
|
|
"created": "2026-02-17T19:39:51.835451Z",
|
|
"modified": "2026-02-17T19:39:51.835451Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vodafoneegypt.tech']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.835451Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e07fe36a-6ee2-4616-95be-56063d2e079c",
|
|
"created": "2026-02-17T19:39:51.835812Z",
|
|
"modified": "2026-02-17T19:39:51.835812Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1e301913-61a8-41a6-834d-179d689bc9cb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e7fbf823-921d-4ca6-9539-8391c1e60230",
|
|
"created": "2026-02-17T19:39:51.835887Z",
|
|
"modified": "2026-02-17T19:39:51.835887Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shanam.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.835887Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9cae3821-33bd-4c68-a6aa-c37eba057f5e",
|
|
"created": "2026-02-17T19:39:51.836179Z",
|
|
"modified": "2026-02-17T19:39:51.836179Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e7fbf823-921d-4ca6-9539-8391c1e60230",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--12f9b4b4-6d30-4aad-8c10-e123d8dd7603",
|
|
"created": "2026-02-17T19:39:51.836254Z",
|
|
"modified": "2026-02-17T19:39:51.836254Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='stonisi.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.836254Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--38bfcca1-20c9-4575-b1cb-19366414b038",
|
|
"created": "2026-02-17T19:39:51.836543Z",
|
|
"modified": "2026-02-17T19:39:51.836543Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--12f9b4b4-6d30-4aad-8c10-e123d8dd7603",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b212c4b3-d590-43ed-bb71-b675050e80fe",
|
|
"created": "2026-02-17T19:39:51.836617Z",
|
|
"modified": "2026-02-17T19:39:51.836617Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='btlin.life']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.836617Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--22011538-883e-4fb9-8720-02803b6c7960",
|
|
"created": "2026-02-17T19:39:51.836908Z",
|
|
"modified": "2026-02-17T19:39:51.836908Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b212c4b3-d590-43ed-bb71-b675050e80fe",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--82353652-f857-49a3-b150-a7af7c9fd013",
|
|
"created": "2026-02-17T19:39:51.836983Z",
|
|
"modified": "2026-02-17T19:39:51.836983Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='moncn.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.836983Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--27f39497-4592-41b0-b75f-54bb4b7ba4d3",
|
|
"created": "2026-02-17T19:39:51.837269Z",
|
|
"modified": "2026-02-17T19:39:51.837269Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--82353652-f857-49a3-b150-a7af7c9fd013",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3ef65f5b-8e2a-4474-8b96-f368f4d4927c",
|
|
"created": "2026-02-17T19:39:51.837343Z",
|
|
"modified": "2026-02-17T19:39:51.837343Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='blocoinformativo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.837343Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7db30ebc-03fb-4275-8579-3d9eff16ebba",
|
|
"created": "2026-02-17T19:39:51.837641Z",
|
|
"modified": "2026-02-17T19:39:51.837641Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3ef65f5b-8e2a-4474-8b96-f368f4d4927c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4716d236-3694-4bd0-8626-bb36208234f0",
|
|
"created": "2026-02-17T19:39:51.837715Z",
|
|
"modified": "2026-02-17T19:39:51.837715Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tsrt.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.837715Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--05998dd2-06c9-4646-a869-adff87952642",
|
|
"created": "2026-02-17T19:39:51.838001Z",
|
|
"modified": "2026-02-17T19:39:51.838001Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4716d236-3694-4bd0-8626-bb36208234f0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9acdaa81-8e8f-4ea6-82e4-6d367191b07b",
|
|
"created": "2026-02-17T19:39:51.838074Z",
|
|
"modified": "2026-02-17T19:39:51.838074Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='covid19masks.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.838074Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a27461e9-1892-4816-8a0d-6760c776ccdb",
|
|
"created": "2026-02-17T19:39:51.838416Z",
|
|
"modified": "2026-02-17T19:39:51.838416Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9acdaa81-8e8f-4ea6-82e4-6d367191b07b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ae33940a-403a-4709-9bac-1d76dedf3495",
|
|
"created": "2026-02-17T19:39:51.838494Z",
|
|
"modified": "2026-02-17T19:39:51.838494Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nabd.site']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.838494Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5917a715-bc0e-4bd8-ad8f-b29041c18bd4",
|
|
"created": "2026-02-17T19:39:51.838786Z",
|
|
"modified": "2026-02-17T19:39:51.838786Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ae33940a-403a-4709-9bac-1d76dedf3495",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--52fb1e8d-ef44-47d6-b2c5-ca95838e9515",
|
|
"created": "2026-02-17T19:39:51.838861Z",
|
|
"modified": "2026-02-17T19:39:51.838861Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='conodeti.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.838861Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fa5ecb0a-6923-413d-8197-50da11405c9a",
|
|
"created": "2026-02-17T19:39:51.839249Z",
|
|
"modified": "2026-02-17T19:39:51.839249Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--52fb1e8d-ef44-47d6-b2c5-ca95838e9515",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--627a1483-a391-4284-8e6a-ec432ba57c0e",
|
|
"created": "2026-02-17T19:39:51.839327Z",
|
|
"modified": "2026-02-17T19:39:51.839327Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='centent-management.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.839327Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5d98b15d-c682-4db4-9929-cc298f6a5293",
|
|
"created": "2026-02-17T19:39:51.839633Z",
|
|
"modified": "2026-02-17T19:39:51.839633Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--627a1483-a391-4284-8e6a-ec432ba57c0e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fb0cd4e5-e607-4d19-b3ee-1d09651c3632",
|
|
"created": "2026-02-17T19:39:51.839711Z",
|
|
"modified": "2026-02-17T19:39:51.839711Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='qwxzyl.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.839711Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--454f9139-f213-4ff9-bb89-060e51e24e6d",
|
|
"created": "2026-02-17T19:39:51.840005Z",
|
|
"modified": "2026-02-17T19:39:51.840005Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fb0cd4e5-e607-4d19-b3ee-1d09651c3632",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3f58cc65-d053-4163-a394-b30a8f45f31e",
|
|
"created": "2026-02-17T19:39:51.840084Z",
|
|
"modified": "2026-02-17T19:39:51.840084Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tribune-mg.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.840084Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1344b754-1956-4361-8d32-437ea9a276af",
|
|
"created": "2026-02-17T19:39:51.840392Z",
|
|
"modified": "2026-02-17T19:39:51.840392Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3f58cc65-d053-4163-a394-b30a8f45f31e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6689f541-4e68-49b2-9326-e52ba0b059a9",
|
|
"created": "2026-02-17T19:39:51.840471Z",
|
|
"modified": "2026-02-17T19:39:51.840471Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bitlly.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.840471Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--edb10fa7-6bc1-4d9e-8bf1-7d1b2a046cf4",
|
|
"created": "2026-02-17T19:39:51.840767Z",
|
|
"modified": "2026-02-17T19:39:51.840767Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6689f541-4e68-49b2-9326-e52ba0b059a9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e1f0a842-96be-4e46-80a9-0c4381d9743c",
|
|
"created": "2026-02-17T19:39:51.840843Z",
|
|
"modified": "2026-02-17T19:39:51.840843Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='clockupdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.840843Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b3fd6788-8525-4c57-a5a0-da25292ca2af",
|
|
"created": "2026-02-17T19:39:51.841137Z",
|
|
"modified": "2026-02-17T19:39:51.841137Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e1f0a842-96be-4e46-80a9-0c4381d9743c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9f3d87a0-37d4-4ba8-830b-a399537f15e3",
|
|
"created": "2026-02-17T19:39:51.841212Z",
|
|
"modified": "2026-02-17T19:39:51.841212Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kalwaski.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.841212Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d12f3933-376e-431d-8110-a32b6d90a974",
|
|
"created": "2026-02-17T19:39:51.84151Z",
|
|
"modified": "2026-02-17T19:39:51.84151Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9f3d87a0-37d4-4ba8-830b-a399537f15e3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2ae25064-c0eb-46a8-b92e-d8a75dc621a7",
|
|
"created": "2026-02-17T19:39:51.841585Z",
|
|
"modified": "2026-02-17T19:39:51.841585Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sysly.sbs']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.841585Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e69af8c6-2089-468a-8721-f81d63ad46d1",
|
|
"created": "2026-02-17T19:39:51.841874Z",
|
|
"modified": "2026-02-17T19:39:51.841874Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2ae25064-c0eb-46a8-b92e-d8a75dc621a7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1ad80452-26f6-4a1b-bd97-e160c187ee7b",
|
|
"created": "2026-02-17T19:39:51.841947Z",
|
|
"modified": "2026-02-17T19:39:51.841947Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='blitzmedia.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.841947Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--64d0aae0-48c8-43b6-88a2-f0150506b14f",
|
|
"created": "2026-02-17T19:39:51.842239Z",
|
|
"modified": "2026-02-17T19:39:51.842239Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1ad80452-26f6-4a1b-bd97-e160c187ee7b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e98d4473-6b1a-46be-be1d-b3f2dc06e070",
|
|
"created": "2026-02-17T19:39:51.842313Z",
|
|
"modified": "2026-02-17T19:39:51.842313Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='folha-9.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.842313Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4ddc9d8d-96d5-4a46-a17b-80fd13bc5498",
|
|
"created": "2026-02-17T19:39:51.842672Z",
|
|
"modified": "2026-02-17T19:39:51.842672Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e98d4473-6b1a-46be-be1d-b3f2dc06e070",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--07ff3502-2c79-4490-85f4-3dd2f40137e5",
|
|
"created": "2026-02-17T19:39:51.842751Z",
|
|
"modified": "2026-02-17T19:39:51.842751Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mastershop.biz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.842751Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5b1547ee-5f65-4150-83b2-5ae8c8474f75",
|
|
"created": "2026-02-17T19:39:51.843084Z",
|
|
"modified": "2026-02-17T19:39:51.843084Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--07ff3502-2c79-4490-85f4-3dd2f40137e5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0905baf1-dba9-498e-8376-68e6378f7897",
|
|
"created": "2026-02-17T19:39:51.843183Z",
|
|
"modified": "2026-02-17T19:39:51.843183Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='enikos.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.843183Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bb25e881-5f33-4b9f-8c97-5cc1f2229a56",
|
|
"created": "2026-02-17T19:39:51.843515Z",
|
|
"modified": "2026-02-17T19:39:51.843515Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0905baf1-dba9-498e-8376-68e6378f7897",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77f0b238-f2c3-47fa-9eb2-d97a675e3761",
|
|
"created": "2026-02-17T19:39:51.843598Z",
|
|
"modified": "2026-02-17T19:39:51.843598Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='z2adigital.cloud']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.843598Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--84460799-9552-4867-963b-3614875e7003",
|
|
"created": "2026-02-17T19:39:51.84392Z",
|
|
"modified": "2026-02-17T19:39:51.84392Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--77f0b238-f2c3-47fa-9eb2-d97a675e3761",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6026098f-260d-47c7-8af1-09aa23e87350",
|
|
"created": "2026-02-17T19:39:51.844002Z",
|
|
"modified": "2026-02-17T19:39:51.844002Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fimes.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.844002Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--006b99e0-8d22-4561-9bf3-f355810d858f",
|
|
"created": "2026-02-17T19:39:51.844312Z",
|
|
"modified": "2026-02-17T19:39:51.844312Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6026098f-260d-47c7-8af1-09aa23e87350",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f7e47501-84e8-4875-901f-0d6c51e1148e",
|
|
"created": "2026-02-17T19:39:51.844391Z",
|
|
"modified": "2026-02-17T19:39:51.844391Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mifcbook.link']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.844391Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--85ac4a53-1384-43ee-95aa-d0b34f38d75a",
|
|
"created": "2026-02-17T19:39:51.8447Z",
|
|
"modified": "2026-02-17T19:39:51.8447Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f7e47501-84e8-4875-901f-0d6c51e1148e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dbb0985b-0c85-48d8-868e-36dbd1b059dc",
|
|
"created": "2026-02-17T19:39:51.84478Z",
|
|
"modified": "2026-02-17T19:39:51.84478Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bi.tly.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.84478Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--22b57dd3-738a-4701-855b-bc91a89c2070",
|
|
"created": "2026-02-17T19:39:51.845085Z",
|
|
"modified": "2026-02-17T19:39:51.845085Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dbb0985b-0c85-48d8-868e-36dbd1b059dc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--230dd69b-a7a0-47c6-b495-bb120d84973e",
|
|
"created": "2026-02-17T19:39:51.845162Z",
|
|
"modified": "2026-02-17T19:39:51.845162Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='candidaturasminfin.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.845162Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--104f2b67-8ced-4b3f-9417-b069d90ef9a4",
|
|
"created": "2026-02-17T19:39:51.845478Z",
|
|
"modified": "2026-02-17T19:39:51.845478Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--230dd69b-a7a0-47c6-b495-bb120d84973e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e712f456-f000-4fb7-99a3-8a858fb4ab7b",
|
|
"created": "2026-02-17T19:39:51.845555Z",
|
|
"modified": "2026-02-17T19:39:51.845555Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shortwidgets.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.845555Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a6d2eaa6-90af-476d-91be-4fa095b259cd",
|
|
"created": "2026-02-17T19:39:51.845866Z",
|
|
"modified": "2026-02-17T19:39:51.845866Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e712f456-f000-4fb7-99a3-8a858fb4ab7b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e79f146e-4dc9-4e3e-8133-d00cbc11b4c6",
|
|
"created": "2026-02-17T19:39:51.845943Z",
|
|
"modified": "2026-02-17T19:39:51.845943Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='zikolo.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.845943Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1d668fa4-3763-4e66-8e59-4e32f4067a01",
|
|
"created": "2026-02-17T19:39:51.846334Z",
|
|
"modified": "2026-02-17T19:39:51.846334Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e79f146e-4dc9-4e3e-8133-d00cbc11b4c6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8b6c1661-e3cd-4d3f-8c05-7bb63f67f18c",
|
|
"created": "2026-02-17T19:39:51.846413Z",
|
|
"modified": "2026-02-17T19:39:51.846413Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='copy-note.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.846413Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6d23bd2e-4a9c-43fe-a31b-001373eccd04",
|
|
"created": "2026-02-17T19:39:51.846721Z",
|
|
"modified": "2026-02-17T19:39:51.846721Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8b6c1661-e3cd-4d3f-8c05-7bb63f67f18c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e15478f9-d52d-4e7c-84df-a628c638567d",
|
|
"created": "2026-02-17T19:39:51.846797Z",
|
|
"modified": "2026-02-17T19:39:51.846797Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sportnow.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.846797Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9617732c-099d-4064-8328-acb47c54baba",
|
|
"created": "2026-02-17T19:39:51.847099Z",
|
|
"modified": "2026-02-17T19:39:51.847099Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e15478f9-d52d-4e7c-84df-a628c638567d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ccbe116a-b21b-48db-80b4-165da7335ed3",
|
|
"created": "2026-02-17T19:39:51.847175Z",
|
|
"modified": "2026-02-17T19:39:51.847175Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sdntribune.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.847175Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5d64400c-e555-4192-a373-2b17a9e86728",
|
|
"created": "2026-02-17T19:39:51.847487Z",
|
|
"modified": "2026-02-17T19:39:51.847487Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ccbe116a-b21b-48db-80b4-165da7335ed3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--011d842f-722a-468c-b2cc-5ee7d1dd12b3",
|
|
"created": "2026-02-17T19:39:51.847567Z",
|
|
"modified": "2026-02-17T19:39:51.847567Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='telenorconn.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.847567Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--de364e04-35db-4821-91e4-0b104e6bb51a",
|
|
"created": "2026-02-17T19:39:51.847877Z",
|
|
"modified": "2026-02-17T19:39:51.847877Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--011d842f-722a-468c-b2cc-5ee7d1dd12b3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dea02cc6-ed9f-4462-a398-722e02dbafc3",
|
|
"created": "2026-02-17T19:39:51.847955Z",
|
|
"modified": "2026-02-17T19:39:51.847955Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='updatingnews.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.847955Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1e0f38a4-52dd-4def-9079-0cab2cb13901",
|
|
"created": "2026-02-17T19:39:51.848264Z",
|
|
"modified": "2026-02-17T19:39:51.848264Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dea02cc6-ed9f-4462-a398-722e02dbafc3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b925b706-cecd-4537-aef2-421b37625b48",
|
|
"created": "2026-02-17T19:39:51.84834Z",
|
|
"modified": "2026-02-17T19:39:51.84834Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='z2digital.cloud']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.84834Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--52f124f3-5805-4799-9eee-d2b52d7933af",
|
|
"created": "2026-02-17T19:39:51.848654Z",
|
|
"modified": "2026-02-17T19:39:51.848654Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b925b706-cecd-4537-aef2-421b37625b48",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--797bf71e-4695-45fa-9a02-e5c80b10fd54",
|
|
"created": "2026-02-17T19:39:51.84873Z",
|
|
"modified": "2026-02-17T19:39:51.84873Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bw-guardian.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.84873Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--327b9680-5b7d-4720-bfd8-dd3b44b66c15",
|
|
"created": "2026-02-17T19:39:51.849035Z",
|
|
"modified": "2026-02-17T19:39:51.849035Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--797bf71e-4695-45fa-9a02-e5c80b10fd54",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--da1b1f9a-60f3-4edd-9fea-814d41238be8",
|
|
"created": "2026-02-17T19:39:51.849111Z",
|
|
"modified": "2026-02-17T19:39:51.849111Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='link-protection.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.849111Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5d81dabd-f159-4ff9-a67f-62111b914b8b",
|
|
"created": "2026-02-17T19:39:51.849427Z",
|
|
"modified": "2026-02-17T19:39:51.849427Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--da1b1f9a-60f3-4edd-9fea-814d41238be8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3368c36a-74cf-4727-b63c-4026c12ce2c9",
|
|
"created": "2026-02-17T19:39:51.849503Z",
|
|
"modified": "2026-02-17T19:39:51.849503Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='speedymax.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.849503Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7f3a471f-57c3-43b0-98ff-62542e39e841",
|
|
"created": "2026-02-17T19:39:51.84994Z",
|
|
"modified": "2026-02-17T19:39:51.84994Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3368c36a-74cf-4727-b63c-4026c12ce2c9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--25e08003-cc25-4636-b305-48a5360d56b9",
|
|
"created": "2026-02-17T19:39:51.850046Z",
|
|
"modified": "2026-02-17T19:39:51.850046Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='suarapapua.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.850046Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a41984a1-d627-4c56-b4a2-e34d8708cb51",
|
|
"created": "2026-02-17T19:39:51.850377Z",
|
|
"modified": "2026-02-17T19:39:51.850377Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--25e08003-cc25-4636-b305-48a5360d56b9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--efb10a71-1e3e-4856-9891-989a83fdad36",
|
|
"created": "2026-02-17T19:39:51.850461Z",
|
|
"modified": "2026-02-17T19:39:51.850461Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='url-promo.club']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.850461Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4190795c-2397-4e40-bb74-066f8d05edfa",
|
|
"created": "2026-02-17T19:39:51.850778Z",
|
|
"modified": "2026-02-17T19:39:51.850778Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--efb10a71-1e3e-4856-9891-989a83fdad36",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3c726f59-a722-4a0c-9f81-88309b720263",
|
|
"created": "2026-02-17T19:39:51.85086Z",
|
|
"modified": "2026-02-17T19:39:51.85086Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='notify-kz.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.85086Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f5362664-e2f5-4fae-b1ff-745831729576",
|
|
"created": "2026-02-17T19:39:51.851182Z",
|
|
"modified": "2026-02-17T19:39:51.851182Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3c726f59-a722-4a0c-9f81-88309b720263",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a57c1702-99a6-4429-b8b2-c6a52fa3cd69",
|
|
"created": "2026-02-17T19:39:51.851263Z",
|
|
"modified": "2026-02-17T19:39:51.851263Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ffoxnewz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.851263Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--534270f6-6a4f-4420-9cdc-ebf310e35059",
|
|
"created": "2026-02-17T19:39:51.851574Z",
|
|
"modified": "2026-02-17T19:39:51.851574Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a57c1702-99a6-4429-b8b2-c6a52fa3cd69",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--78747b96-04b7-47e3-beba-9f29303f0d8d",
|
|
"created": "2026-02-17T19:39:51.851655Z",
|
|
"modified": "2026-02-17T19:39:51.851655Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='redirecting.page']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.851655Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7c440010-59a1-42d1-a5aa-4f835990a8ea",
|
|
"created": "2026-02-17T19:39:51.851967Z",
|
|
"modified": "2026-02-17T19:39:51.851967Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--78747b96-04b7-47e3-beba-9f29303f0d8d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5d86ffa4-e095-4541-ac9e-8553e576c2eb",
|
|
"created": "2026-02-17T19:39:51.852047Z",
|
|
"modified": "2026-02-17T19:39:51.852047Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='speedy.sbs']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.852047Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--42d85b1c-1b62-472d-98e5-886e3c2e40a1",
|
|
"created": "2026-02-17T19:39:51.852362Z",
|
|
"modified": "2026-02-17T19:39:51.852362Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5d86ffa4-e095-4541-ac9e-8553e576c2eb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d504696c-7418-4e21-a5cb-886d78459158",
|
|
"created": "2026-02-17T19:39:51.852442Z",
|
|
"modified": "2026-02-17T19:39:51.852442Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='syncservices.one']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.852442Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ec71f208-e9c4-45a8-9304-6ca48ee36a71",
|
|
"created": "2026-02-17T19:39:51.852755Z",
|
|
"modified": "2026-02-17T19:39:51.852755Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d504696c-7418-4e21-a5cb-886d78459158",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9194adfb-c667-4ab1-ab17-80a68003afe1",
|
|
"created": "2026-02-17T19:39:51.852833Z",
|
|
"modified": "2026-02-17T19:39:51.852833Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lexpress.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.852833Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d2013e45-1d9f-4e29-b549-d0ab6fddc655",
|
|
"created": "2026-02-17T19:39:51.853147Z",
|
|
"modified": "2026-02-17T19:39:51.853147Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9194adfb-c667-4ab1-ab17-80a68003afe1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--830b2c00-5378-4722-933f-8094e4a35dc7",
|
|
"created": "2026-02-17T19:39:51.853227Z",
|
|
"modified": "2026-02-17T19:39:51.853227Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='distedc.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.853227Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9cf99b5f-9faa-467f-811b-c20cfaf31584",
|
|
"created": "2026-02-17T19:39:51.853608Z",
|
|
"modified": "2026-02-17T19:39:51.853608Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--830b2c00-5378-4722-933f-8094e4a35dc7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--be49feb3-126a-4b09-a835-a23786bb93c0",
|
|
"created": "2026-02-17T19:39:51.853691Z",
|
|
"modified": "2026-02-17T19:39:51.853691Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='apps-ios.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.853691Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e293644e-e68e-45fc-ab3c-fe5985de250c",
|
|
"created": "2026-02-17T19:39:51.854008Z",
|
|
"modified": "2026-02-17T19:39:51.854008Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--be49feb3-126a-4b09-a835-a23786bb93c0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ed32d16a-8ded-4d0d-a474-9b4ad911d0a6",
|
|
"created": "2026-02-17T19:39:51.854087Z",
|
|
"modified": "2026-02-17T19:39:51.854087Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtubewatch.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.854087Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d517b6c7-ae71-4b4e-8483-f5c798bcb5eb",
|
|
"created": "2026-02-17T19:39:51.854404Z",
|
|
"modified": "2026-02-17T19:39:51.854404Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ed32d16a-8ded-4d0d-a474-9b4ad911d0a6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1cd25891-9c3d-44e1-80d6-3f6689b1f661",
|
|
"created": "2026-02-17T19:39:51.854485Z",
|
|
"modified": "2026-02-17T19:39:51.854485Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='alraeeenews.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.854485Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2e00fc1a-c5b5-4024-9bf3-0c3a5130d18c",
|
|
"created": "2026-02-17T19:39:51.854798Z",
|
|
"modified": "2026-02-17T19:39:51.854798Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1cd25891-9c3d-44e1-80d6-3f6689b1f661",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fbb22667-1ea3-404c-960f-ab279dfca797",
|
|
"created": "2026-02-17T19:39:51.854921Z",
|
|
"modified": "2026-02-17T19:39:51.854921Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='people-beeline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.854921Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a51796da-7e56-4e3f-84e4-67a3b47bafaf",
|
|
"created": "2026-02-17T19:39:51.855252Z",
|
|
"modified": "2026-02-17T19:39:51.855252Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fbb22667-1ea3-404c-960f-ab279dfca797",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8006e7fb-0444-4687-b56e-ddb36095e570",
|
|
"created": "2026-02-17T19:39:51.855331Z",
|
|
"modified": "2026-02-17T19:39:51.855331Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tickets-kz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.855331Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ee8a8607-0fd5-472d-ad29-08be848b81b6",
|
|
"created": "2026-02-17T19:39:51.855648Z",
|
|
"modified": "2026-02-17T19:39:51.855648Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8006e7fb-0444-4687-b56e-ddb36095e570",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9fe64dba-adaf-4cf4-98f0-8ad33ae48d90",
|
|
"created": "2026-02-17T19:39:51.855727Z",
|
|
"modified": "2026-02-17T19:39:51.855727Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bity.ws']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.855727Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--026852e6-da01-4940-b3f1-69fd4aa512c0",
|
|
"created": "2026-02-17T19:39:51.856032Z",
|
|
"modified": "2026-02-17T19:39:51.856032Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9fe64dba-adaf-4cf4-98f0-8ad33ae48d90",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b2cc86e3-a911-404c-8ed9-9d35e3cf1069",
|
|
"created": "2026-02-17T19:39:51.856111Z",
|
|
"modified": "2026-02-17T19:39:51.856111Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='citroen.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.856111Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cdeaa055-3b31-435b-9e70-e7d702767647",
|
|
"created": "2026-02-17T19:39:51.856407Z",
|
|
"modified": "2026-02-17T19:39:51.856407Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b2cc86e3-a911-404c-8ed9-9d35e3cf1069",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--341db6c7-d17c-46b6-adef-971a7d56a932",
|
|
"created": "2026-02-17T19:39:51.856481Z",
|
|
"modified": "2026-02-17T19:39:51.856481Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bitlyrs.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.856481Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--95216566-f48d-42d8-991b-473d6948dea6",
|
|
"created": "2026-02-17T19:39:51.856771Z",
|
|
"modified": "2026-02-17T19:39:51.856771Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--341db6c7-d17c-46b6-adef-971a7d56a932",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3448919a-203a-4058-9e12-2837962a3305",
|
|
"created": "2026-02-17T19:39:51.856845Z",
|
|
"modified": "2026-02-17T19:39:51.856845Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='qazsporttv.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.856845Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d08c5af6-4e80-4dea-9491-5fbb435027ea",
|
|
"created": "2026-02-17T19:39:51.857204Z",
|
|
"modified": "2026-02-17T19:39:51.857204Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3448919a-203a-4058-9e12-2837962a3305",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3efa5be5-a260-47a1-86e7-87a9276a621a",
|
|
"created": "2026-02-17T19:39:51.85728Z",
|
|
"modified": "2026-02-17T19:39:51.85728Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='novojornal.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.85728Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--69150a10-8c16-41f6-8fa0-2d8ec6de6ffe",
|
|
"created": "2026-02-17T19:39:51.857574Z",
|
|
"modified": "2026-02-17T19:39:51.857574Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3efa5be5-a260-47a1-86e7-87a9276a621a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1e77039c-f5c4-417b-9716-c83d0d5c147e",
|
|
"created": "2026-02-17T19:39:51.857647Z",
|
|
"modified": "2026-02-17T19:39:51.857647Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='edolio5.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.857647Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0175e7d4-868c-4b4f-be97-e4c00fb47dd8",
|
|
"created": "2026-02-17T19:39:51.857934Z",
|
|
"modified": "2026-02-17T19:39:51.857934Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1e77039c-f5c4-417b-9716-c83d0d5c147e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e86bb794-2ac3-4e20-aa90-14d67c7abaca",
|
|
"created": "2026-02-17T19:39:51.858006Z",
|
|
"modified": "2026-02-17T19:39:51.858006Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='timestampsync.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.858006Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--36db33ef-21b0-4645-94e3-8926d352680a",
|
|
"created": "2026-02-17T19:39:51.858306Z",
|
|
"modified": "2026-02-17T19:39:51.858306Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e86bb794-2ac3-4e20-aa90-14d67c7abaca",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8a4207e7-a3ee-49fd-9899-3d72259303fd",
|
|
"created": "2026-02-17T19:39:51.858381Z",
|
|
"modified": "2026-02-17T19:39:51.858381Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='link-m.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.858381Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cbfa9fcf-0708-46f3-9130-36cd5cd7c7f1",
|
|
"created": "2026-02-17T19:39:51.858689Z",
|
|
"modified": "2026-02-17T19:39:51.858689Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8a4207e7-a3ee-49fd-9899-3d72259303fd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ce1fb5e5-ccfa-4d21-8e96-6c6f724c90ca",
|
|
"created": "2026-02-17T19:39:51.858768Z",
|
|
"modified": "2026-02-17T19:39:51.858768Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='truelocation.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.858768Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ccac5c88-2ca6-4dd6-980c-0ce78294b6c4",
|
|
"created": "2026-02-17T19:39:51.859075Z",
|
|
"modified": "2026-02-17T19:39:51.859075Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ce1fb5e5-ccfa-4d21-8e96-6c6f724c90ca",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e02d2706-f5dd-4c7a-a997-190b46dd0b4c",
|
|
"created": "2026-02-17T19:39:51.859155Z",
|
|
"modified": "2026-02-17T19:39:51.859155Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gabzmus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.859155Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9d06ee91-c47b-4054-8900-df4ac4b0ed6d",
|
|
"created": "2026-02-17T19:39:51.859454Z",
|
|
"modified": "2026-02-17T19:39:51.859454Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e02d2706-f5dd-4c7a-a997-190b46dd0b4c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2507deb4-0037-4ec7-8fc3-dbe899e7046e",
|
|
"created": "2026-02-17T19:39:51.859532Z",
|
|
"modified": "2026-02-17T19:39:51.859532Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mytrips.quest']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.859532Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--91612690-2578-4776-a91e-abd2253784fd",
|
|
"created": "2026-02-17T19:39:51.859832Z",
|
|
"modified": "2026-02-17T19:39:51.859832Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2507deb4-0037-4ec7-8fc3-dbe899e7046e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--59ec97c8-846a-4dde-bbbd-db6b542f6d99",
|
|
"created": "2026-02-17T19:39:51.859908Z",
|
|
"modified": "2026-02-17T19:39:51.859908Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='browsercheck.services']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.859908Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--009eefaa-f74a-42ff-98d6-5f5fb8d730e1",
|
|
"created": "2026-02-17T19:39:51.860208Z",
|
|
"modified": "2026-02-17T19:39:51.860208Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--59ec97c8-846a-4dde-bbbd-db6b542f6d99",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a5e251a3-b7ce-4d01-97b8-d02d2b6c6b91",
|
|
"created": "2026-02-17T19:39:51.860281Z",
|
|
"modified": "2026-02-17T19:39:51.860281Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ilnk.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.860281Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6c603169-9e84-4545-a889-2b75b2a6272a",
|
|
"created": "2026-02-17T19:39:51.860633Z",
|
|
"modified": "2026-02-17T19:39:51.860633Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a5e251a3-b7ce-4d01-97b8-d02d2b6c6b91",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--541f072c-c0cc-48f0-aa9a-839229660103",
|
|
"created": "2026-02-17T19:39:51.860711Z",
|
|
"modified": "2026-02-17T19:39:51.860711Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='icloudeu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.860711Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e610770a-6e13-455e-942e-3a71b0c6002e",
|
|
"created": "2026-02-17T19:39:51.861002Z",
|
|
"modified": "2026-02-17T19:39:51.861002Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--541f072c-c0cc-48f0-aa9a-839229660103",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ceb2c7ef-16c0-4bea-ad38-b21790b3ddef",
|
|
"created": "2026-02-17T19:39:51.861076Z",
|
|
"modified": "2026-02-17T19:39:51.861076Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kollesa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.861076Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ec50a8be-205d-41ce-8f2c-8ddcda81c4ae",
|
|
"created": "2026-02-17T19:39:51.861365Z",
|
|
"modified": "2026-02-17T19:39:51.861365Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ceb2c7ef-16c0-4bea-ad38-b21790b3ddef",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b7199333-94d9-4647-b0bb-faab4a93ae68",
|
|
"created": "2026-02-17T19:39:51.861438Z",
|
|
"modified": "2026-02-17T19:39:51.861438Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bookjob.club']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.861438Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b40bdb21-0884-496c-b3ee-45dc48e21275",
|
|
"created": "2026-02-17T19:39:51.861736Z",
|
|
"modified": "2026-02-17T19:39:51.861736Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b7199333-94d9-4647-b0bb-faab4a93ae68",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--337cd34d-3a08-436b-bbae-a1b84a739270",
|
|
"created": "2026-02-17T19:39:51.861812Z",
|
|
"modified": "2026-02-17T19:39:51.861812Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cnn-portugal.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.861812Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2581006f-890c-44e8-b6a0-4ccfff6db5a3",
|
|
"created": "2026-02-17T19:39:51.862106Z",
|
|
"modified": "2026-02-17T19:39:51.862106Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--337cd34d-3a08-436b-bbae-a1b84a739270",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9e3531da-ba58-4617-b28d-42be66a3d567",
|
|
"created": "2026-02-17T19:39:51.862177Z",
|
|
"modified": "2026-02-17T19:39:51.862177Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='despachosnegocios']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.862177Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2a28f757-3834-4520-a234-f36597ff8716",
|
|
"created": "2026-02-17T19:39:51.862469Z",
|
|
"modified": "2026-02-17T19:39:51.862469Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9e3531da-ba58-4617-b28d-42be66a3d567",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e7c67cf3-6df3-4ade-9386-ce765bfe260d",
|
|
"created": "2026-02-17T19:39:51.862543Z",
|
|
"modified": "2026-02-17T19:39:51.862543Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='egyqaz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.862543Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--04f2c15f-f4de-489a-a708-f6091e95c879",
|
|
"created": "2026-02-17T19:39:51.862831Z",
|
|
"modified": "2026-02-17T19:39:51.862831Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e7c67cf3-6df3-4ade-9386-ce765bfe260d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5d76f2eb-352e-4159-a54d-0533197e477d",
|
|
"created": "2026-02-17T19:39:51.862907Z",
|
|
"modified": "2026-02-17T19:39:51.862907Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='flash.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.862907Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--74ca4b6a-2ea7-41e5-9a52-9adfc43d88ef",
|
|
"created": "2026-02-17T19:39:51.863199Z",
|
|
"modified": "2026-02-17T19:39:51.863199Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5d76f2eb-352e-4159-a54d-0533197e477d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f820523f-8bb6-473b-a195-fa06a92ce0b0",
|
|
"created": "2026-02-17T19:39:51.863271Z",
|
|
"modified": "2026-02-17T19:39:51.863271Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='limk.one']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.863271Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--75b637ff-4f54-4e36-bec5-c746797d248b",
|
|
"created": "2026-02-17T19:39:51.863556Z",
|
|
"modified": "2026-02-17T19:39:51.863556Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f820523f-8bb6-473b-a195-fa06a92ce0b0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9d47401a-04a6-4c42-9e53-fa939850662d",
|
|
"created": "2026-02-17T19:39:51.863629Z",
|
|
"modified": "2026-02-17T19:39:51.863629Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='adultpcz.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.863629Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5c7e4cf3-adff-4c67-b63e-57b34ac8598b",
|
|
"created": "2026-02-17T19:39:51.863981Z",
|
|
"modified": "2026-02-17T19:39:51.863981Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9d47401a-04a6-4c42-9e53-fa939850662d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b9af901e-0d21-4e8c-a225-f6a4fb189e5a",
|
|
"created": "2026-02-17T19:39:51.864059Z",
|
|
"modified": "2026-02-17T19:39:51.864059Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='almal-news.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.864059Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--31c138ea-c17f-41b1-a0d1-bc26cc018b7b",
|
|
"created": "2026-02-17T19:39:51.86442Z",
|
|
"modified": "2026-02-17T19:39:51.86442Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b9af901e-0d21-4e8c-a225-f6a4fb189e5a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7f64584f-3e2b-4d8c-a356-135acfd84ff7",
|
|
"created": "2026-02-17T19:39:51.86451Z",
|
|
"modified": "2026-02-17T19:39:51.86451Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='weekendcool.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.86451Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d351070c-a74b-4bee-ba2d-33ba53163caa",
|
|
"created": "2026-02-17T19:39:51.864817Z",
|
|
"modified": "2026-02-17T19:39:51.864817Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7f64584f-3e2b-4d8c-a356-135acfd84ff7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--aee4c1e6-1cbb-434d-b4b6-a232d1c257f1",
|
|
"created": "2026-02-17T19:39:51.864895Z",
|
|
"modified": "2026-02-17T19:39:51.864895Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtube.gr.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.864895Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cd092ae1-0e0b-4af7-8f82-6dfc3d04501a",
|
|
"created": "2026-02-17T19:39:51.865191Z",
|
|
"modified": "2026-02-17T19:39:51.865191Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--aee4c1e6-1cbb-434d-b4b6-a232d1c257f1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--72f64f3b-ee22-4ca8-84bd-8895f7e722e6",
|
|
"created": "2026-02-17T19:39:51.865265Z",
|
|
"modified": "2026-02-17T19:39:51.865265Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='danas.bid']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.865265Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3ce51676-1afb-45d2-af43-967abbce74a1",
|
|
"created": "2026-02-17T19:39:51.865557Z",
|
|
"modified": "2026-02-17T19:39:51.865557Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--72f64f3b-ee22-4ca8-84bd-8895f7e722e6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d3f98f6b-17f9-49ab-9ca1-9a56da980fab",
|
|
"created": "2026-02-17T19:39:51.865632Z",
|
|
"modified": "2026-02-17T19:39:51.865632Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lifestyleshops.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.865632Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9a4f3a90-7899-4e78-bcec-6cf7d4519adb",
|
|
"created": "2026-02-17T19:39:51.865929Z",
|
|
"modified": "2026-02-17T19:39:51.865929Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d3f98f6b-17f9-49ab-9ca1-9a56da980fab",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f28093bf-94cc-4877-a016-3a3ec753530f",
|
|
"created": "2026-02-17T19:39:51.866002Z",
|
|
"modified": "2026-02-17T19:39:51.866002Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='connectivitycheck.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.866002Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2027192a-8ffd-4eba-a93b-7ad65d577bff",
|
|
"created": "2026-02-17T19:39:51.8663Z",
|
|
"modified": "2026-02-17T19:39:51.8663Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f28093bf-94cc-4877-a016-3a3ec753530f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6a078dea-d984-45db-83e8-764572ee4acc",
|
|
"created": "2026-02-17T19:39:51.866373Z",
|
|
"modified": "2026-02-17T19:39:51.866373Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='llinkedin.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.866373Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--48223cb5-49f6-49fc-ae38-1eaaf16cf232",
|
|
"created": "2026-02-17T19:39:51.866665Z",
|
|
"modified": "2026-02-17T19:39:51.866665Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6a078dea-d984-45db-83e8-764572ee4acc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dd360ef0-0815-4399-bcd6-82587f9bd595",
|
|
"created": "2026-02-17T19:39:51.86674Z",
|
|
"modified": "2026-02-17T19:39:51.86674Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bestwesternt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.86674Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d0ba5305-c861-4ac7-a294-a2cd3d1e15c4",
|
|
"created": "2026-02-17T19:39:51.867034Z",
|
|
"modified": "2026-02-17T19:39:51.867034Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dd360ef0-0815-4399-bcd6-82587f9bd595",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--21e40851-8030-47d4-94e5-0d4dd317a163",
|
|
"created": "2026-02-17T19:39:51.86711Z",
|
|
"modified": "2026-02-17T19:39:51.86711Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newzeto.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.86711Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6586d017-7149-4a4d-aaf7-06d6953be0cc",
|
|
"created": "2026-02-17T19:39:51.867474Z",
|
|
"modified": "2026-02-17T19:39:51.867474Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--21e40851-8030-47d4-94e5-0d4dd317a163",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--85365601-bbe3-4789-9401-2c123035de78",
|
|
"created": "2026-02-17T19:39:51.86755Z",
|
|
"modified": "2026-02-17T19:39:51.86755Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='trkc.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.86755Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1e9c77c7-9f2c-49c6-8d2d-010e76556f1c",
|
|
"created": "2026-02-17T19:39:51.867843Z",
|
|
"modified": "2026-02-17T19:39:51.867843Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--85365601-bbe3-4789-9401-2c123035de78",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c4516413-d085-4de4-9352-6460992b7b2b",
|
|
"created": "2026-02-17T19:39:51.867916Z",
|
|
"modified": "2026-02-17T19:39:51.867916Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gulfsports.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.867916Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--879d5c57-a91d-4a0a-9fb8-fe7bdb89001b",
|
|
"created": "2026-02-17T19:39:51.868208Z",
|
|
"modified": "2026-02-17T19:39:51.868208Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c4516413-d085-4de4-9352-6460992b7b2b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1b65f209-742e-48a5-9586-cb1227cd96e8",
|
|
"created": "2026-02-17T19:39:51.86828Z",
|
|
"modified": "2026-02-17T19:39:51.86828Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tobupmi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.86828Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4e10e6a4-96f1-4ad9-a3cc-3bc9a7cdc622",
|
|
"created": "2026-02-17T19:39:51.868569Z",
|
|
"modified": "2026-02-17T19:39:51.868569Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1b65f209-742e-48a5-9586-cb1227cd96e8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ff16355b-a62e-402f-bfe1-bb83ed2b4419",
|
|
"created": "2026-02-17T19:39:51.868643Z",
|
|
"modified": "2026-02-17T19:39:51.868643Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bitt.fi']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.868643Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3a56279b-d12d-4c98-a55e-3d4b195e3e75",
|
|
"created": "2026-02-17T19:39:51.868929Z",
|
|
"modified": "2026-02-17T19:39:51.868929Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ff16355b-a62e-402f-bfe1-bb83ed2b4419",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2f4498de-6762-448d-abfc-5eb2556b1333",
|
|
"created": "2026-02-17T19:39:51.869002Z",
|
|
"modified": "2026-02-17T19:39:51.869002Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shortenurls.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.869002Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--59dc97d0-ba77-4b04-b24a-ffb2c9df8ad8",
|
|
"created": "2026-02-17T19:39:51.869297Z",
|
|
"modified": "2026-02-17T19:39:51.869297Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2f4498de-6762-448d-abfc-5eb2556b1333",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b8a32b1a-5dde-4ab3-bf4c-d5c6a5ab11a8",
|
|
"created": "2026-02-17T19:39:51.869371Z",
|
|
"modified": "2026-02-17T19:39:51.869371Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mulherevips.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.869371Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--71ef8340-9127-4d66-8803-ea02c62c6eb5",
|
|
"created": "2026-02-17T19:39:51.869664Z",
|
|
"modified": "2026-02-17T19:39:51.869664Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b8a32b1a-5dde-4ab3-bf4c-d5c6a5ab11a8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--632b292c-edff-4b31-a118-60b78c1eb0ac",
|
|
"created": "2026-02-17T19:39:51.869738Z",
|
|
"modified": "2026-02-17T19:39:51.869738Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fast-notify.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.869738Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f6024fa2-0ea1-4ef9-98f7-5d4a3859d8ab",
|
|
"created": "2026-02-17T19:39:51.870033Z",
|
|
"modified": "2026-02-17T19:39:51.870033Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--632b292c-edff-4b31-a118-60b78c1eb0ac",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b1d037dd-1e13-4060-b81b-6b1cd34ef8af",
|
|
"created": "2026-02-17T19:39:51.870106Z",
|
|
"modified": "2026-02-17T19:39:51.870106Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='updates4you.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.870106Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6044bd6c-7137-4a2d-af98-8e3e6361f0f5",
|
|
"created": "2026-02-17T19:39:51.870401Z",
|
|
"modified": "2026-02-17T19:39:51.870401Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b1d037dd-1e13-4060-b81b-6b1cd34ef8af",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7273dd16-42fb-4ca0-95e6-da4f64c84292",
|
|
"created": "2026-02-17T19:39:51.870476Z",
|
|
"modified": "2026-02-17T19:39:51.870476Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jornalf8.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.870476Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--37c059fd-c508-41dc-a824-353a78b3f11d",
|
|
"created": "2026-02-17T19:39:51.870831Z",
|
|
"modified": "2026-02-17T19:39:51.870831Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7273dd16-42fb-4ca0-95e6-da4f64c84292",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--86e6d8bb-86e7-4dc4-9660-86642e49a8d3",
|
|
"created": "2026-02-17T19:39:51.870907Z",
|
|
"modified": "2026-02-17T19:39:51.870907Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='icloudflair.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.870907Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c712eb0b-ce25-40b1-bb16-6b14f3367692",
|
|
"created": "2026-02-17T19:39:51.871212Z",
|
|
"modified": "2026-02-17T19:39:51.871212Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--86e6d8bb-86e7-4dc4-9660-86642e49a8d3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57d641f8-f39c-4257-9de9-abbb2d5e9dbe",
|
|
"created": "2026-02-17T19:39:51.871285Z",
|
|
"modified": "2026-02-17T19:39:51.871285Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='novosti.bid']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.871285Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--03bc5583-1e41-4626-bf2f-7689b9ba7446",
|
|
"created": "2026-02-17T19:39:51.871578Z",
|
|
"modified": "2026-02-17T19:39:51.871578Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--57d641f8-f39c-4257-9de9-abbb2d5e9dbe",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--12360ec0-cfa4-4f5b-8f0d-e3208118f4ca",
|
|
"created": "2026-02-17T19:39:51.871651Z",
|
|
"modified": "2026-02-17T19:39:51.871651Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='twtter.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.871651Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0dfc9ff4-d964-4777-9c73-3ee7fb21be44",
|
|
"created": "2026-02-17T19:39:51.871939Z",
|
|
"modified": "2026-02-17T19:39:51.871939Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--12360ec0-cfa4-4f5b-8f0d-e3208118f4ca",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--71b3b7e6-7326-4bdf-baa7-c791e5136868",
|
|
"created": "2026-02-17T19:39:51.872012Z",
|
|
"modified": "2026-02-17T19:39:51.872012Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tgrthgsrgwrthwrtgwr.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.872012Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--72d18aa2-d82b-4e72-9150-cfeb79298b1b",
|
|
"created": "2026-02-17T19:39:51.872319Z",
|
|
"modified": "2026-02-17T19:39:51.872319Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--71b3b7e6-7326-4bdf-baa7-c791e5136868",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--065b3b0a-a1bb-45a6-9746-d25f2773c488",
|
|
"created": "2026-02-17T19:39:51.872392Z",
|
|
"modified": "2026-02-17T19:39:51.872392Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='getsignalapps.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.872392Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0f251657-8286-44c7-a4b6-4acaa9f15e84",
|
|
"created": "2026-02-17T19:39:51.872693Z",
|
|
"modified": "2026-02-17T19:39:51.872693Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--065b3b0a-a1bb-45a6-9746-d25f2773c488",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ed6ef3b1-428b-4d45-9f39-5ccad2b46402",
|
|
"created": "2026-02-17T19:39:51.872767Z",
|
|
"modified": "2026-02-17T19:39:51.872767Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='smsuns.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.872767Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3373d3f4-aae6-4a9f-899e-19ebd2747e85",
|
|
"created": "2026-02-17T19:39:51.873054Z",
|
|
"modified": "2026-02-17T19:39:51.873054Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ed6ef3b1-428b-4d45-9f39-5ccad2b46402",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4a33084e-e157-44dc-9eb6-51bece9de2dd",
|
|
"created": "2026-02-17T19:39:51.873127Z",
|
|
"modified": "2026-02-17T19:39:51.873127Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mobnetlink2.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.873127Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b2d3a8ec-3d66-4530-9194-1d116e452008",
|
|
"created": "2026-02-17T19:39:51.873422Z",
|
|
"modified": "2026-02-17T19:39:51.873422Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4a33084e-e157-44dc-9eb6-51bece9de2dd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7e74633a-dc0d-4fb4-8579-ac3352949b79",
|
|
"created": "2026-02-17T19:39:51.873496Z",
|
|
"modified": "2026-02-17T19:39:51.873496Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='affise.app']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.873496Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f512a302-3d45-4416-9667-2d933561346c",
|
|
"created": "2026-02-17T19:39:51.873787Z",
|
|
"modified": "2026-02-17T19:39:51.873787Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7e74633a-dc0d-4fb4-8579-ac3352949b79",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--81bf2fa9-7a5b-438d-9fd4-01ecc7a5854b",
|
|
"created": "2026-02-17T19:39:51.873861Z",
|
|
"modified": "2026-02-17T19:39:51.873861Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='etisalatgreen.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.873861Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a8857cf1-fcd3-4003-8691-c624af16676a",
|
|
"created": "2026-02-17T19:39:51.874404Z",
|
|
"modified": "2026-02-17T19:39:51.874404Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--81bf2fa9-7a5b-438d-9fd4-01ecc7a5854b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4ccec138-845e-4109-a221-0807563f074a",
|
|
"created": "2026-02-17T19:39:51.874482Z",
|
|
"modified": "2026-02-17T19:39:51.874482Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='omanreal.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.874482Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--258df83a-2c7e-4b00-8c96-ceced17c39e1",
|
|
"created": "2026-02-17T19:39:51.87478Z",
|
|
"modified": "2026-02-17T19:39:51.87478Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4ccec138-845e-4109-a221-0807563f074a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--11e87745-13a6-4e12-ac6b-1e9bbd497d82",
|
|
"created": "2026-02-17T19:39:51.874854Z",
|
|
"modified": "2026-02-17T19:39:51.874854Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bulk-ads.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.874854Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--69e966cd-0291-4aaa-9b4e-cf5d5fb60ac2",
|
|
"created": "2026-02-17T19:39:51.875143Z",
|
|
"modified": "2026-02-17T19:39:51.875143Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--11e87745-13a6-4e12-ac6b-1e9bbd497d82",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7753dbdc-430e-4b19-8b61-a9099e15101b",
|
|
"created": "2026-02-17T19:39:51.875217Z",
|
|
"modified": "2026-02-17T19:39:51.875217Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='yo-um7.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.875217Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--03fdb160-5074-492b-921d-107faec73412",
|
|
"created": "2026-02-17T19:39:51.875566Z",
|
|
"modified": "2026-02-17T19:39:51.875566Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7753dbdc-430e-4b19-8b61-a9099e15101b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ad27d767-d579-4847-b64b-799bd59ed751",
|
|
"created": "2026-02-17T19:39:51.875642Z",
|
|
"modified": "2026-02-17T19:39:51.875642Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='instagam.click']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.875642Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--23de9368-3ad0-4eba-92f1-233c95a19c5a",
|
|
"created": "2026-02-17T19:39:51.875934Z",
|
|
"modified": "2026-02-17T19:39:51.875934Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ad27d767-d579-4847-b64b-799bd59ed751",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a5a46e93-c779-42e9-a6d7-36e363812d9b",
|
|
"created": "2026-02-17T19:39:51.876008Z",
|
|
"modified": "2026-02-17T19:39:51.876008Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='businessafricaonline.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.876008Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4f5c921c-c72e-45ff-a144-a53189dfdcf1",
|
|
"created": "2026-02-17T19:39:51.876306Z",
|
|
"modified": "2026-02-17T19:39:51.876306Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a5a46e93-c779-42e9-a6d7-36e363812d9b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--404863a5-5bf1-47aa-bdda-713afa7cc597",
|
|
"created": "2026-02-17T19:39:51.876382Z",
|
|
"modified": "2026-02-17T19:39:51.876382Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jornaldeangola.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.876382Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d73decde-b845-4cea-bdf4-39035675e2a3",
|
|
"created": "2026-02-17T19:39:51.876679Z",
|
|
"modified": "2026-02-17T19:39:51.876679Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--404863a5-5bf1-47aa-bdda-713afa7cc597",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4342ba0b-59da-4479-ab5d-9a457b92f432",
|
|
"created": "2026-02-17T19:39:51.876753Z",
|
|
"modified": "2026-02-17T19:39:51.876753Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='guardnews.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.876753Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fafcb79f-5afa-416e-8b11-d987b0195ef5",
|
|
"created": "2026-02-17T19:39:51.877049Z",
|
|
"modified": "2026-02-17T19:39:51.877049Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4342ba0b-59da-4479-ab5d-9a457b92f432",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4012e7a4-ecb9-47a2-b4aa-792bc2928ef4",
|
|
"created": "2026-02-17T19:39:51.877122Z",
|
|
"modified": "2026-02-17T19:39:51.877122Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kathimerini.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.877122Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0446693f-70df-4650-9a97-24cccc78dc47",
|
|
"created": "2026-02-17T19:39:51.877415Z",
|
|
"modified": "2026-02-17T19:39:51.877415Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4012e7a4-ecb9-47a2-b4aa-792bc2928ef4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a7e2b519-20e6-4af5-8deb-a2458811f56a",
|
|
"created": "2026-02-17T19:39:51.877487Z",
|
|
"modified": "2026-02-17T19:39:51.877487Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wesalcity.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.877487Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--55bc7c06-f3ee-471c-b57b-42819999169e",
|
|
"created": "2026-02-17T19:39:51.877778Z",
|
|
"modified": "2026-02-17T19:39:51.877778Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a7e2b519-20e6-4af5-8deb-a2458811f56a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--95155270-57e5-40ea-989d-6a12fa83982f",
|
|
"created": "2026-02-17T19:39:51.877853Z",
|
|
"modified": "2026-02-17T19:39:51.877853Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='krisha-kz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.877853Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dc5e24bb-7846-4cab-8eb5-b273c8328c14",
|
|
"created": "2026-02-17T19:39:51.882804Z",
|
|
"modified": "2026-02-17T19:39:51.882804Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--95155270-57e5-40ea-989d-6a12fa83982f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--165d439f-b8b0-43c8-a6ee-6da81e37d165",
|
|
"created": "2026-02-17T19:39:51.882927Z",
|
|
"modified": "2026-02-17T19:39:51.882927Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='utube.to']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.882927Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6f9f8db3-78a9-4494-9f23-1fd5109065e2",
|
|
"created": "2026-02-17T19:39:51.883241Z",
|
|
"modified": "2026-02-17T19:39:51.883241Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--165d439f-b8b0-43c8-a6ee-6da81e37d165",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--505844dc-6ee6-490d-a121-25f5ed6f53bc",
|
|
"created": "2026-02-17T19:39:51.883321Z",
|
|
"modified": "2026-02-17T19:39:51.883321Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fdnews.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.883321Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a867d341-a81e-4822-9c60-f7d827b7df29",
|
|
"created": "2026-02-17T19:39:51.883622Z",
|
|
"modified": "2026-02-17T19:39:51.883622Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--505844dc-6ee6-490d-a121-25f5ed6f53bc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f494a31e-6335-4640-8659-11cb0e87a60c",
|
|
"created": "2026-02-17T19:39:51.883703Z",
|
|
"modified": "2026-02-17T19:39:51.883703Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shoxtek.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.883703Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b4b4314d-2e92-4f3a-84f9-724b1637e03a",
|
|
"created": "2026-02-17T19:39:51.884003Z",
|
|
"modified": "2026-02-17T19:39:51.884003Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f494a31e-6335-4640-8659-11cb0e87a60c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77a4e5de-3aa1-4ee2-8277-ee7d5c82f565",
|
|
"created": "2026-02-17T19:39:51.884079Z",
|
|
"modified": "2026-02-17T19:39:51.884079Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='blacktrail.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.884079Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fbc80071-259b-46b7-9a2f-e8fd8fcc5c8b",
|
|
"created": "2026-02-17T19:39:51.884372Z",
|
|
"modified": "2026-02-17T19:39:51.884372Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--77a4e5de-3aa1-4ee2-8277-ee7d5c82f565",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--710e5b57-dda6-49d0-8626-1de690672b0a",
|
|
"created": "2026-02-17T19:39:51.884446Z",
|
|
"modified": "2026-02-17T19:39:51.884446Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='protothema.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.884446Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--88c03b41-0aae-433b-a3ff-bd525ea3f9c7",
|
|
"created": "2026-02-17T19:39:51.884743Z",
|
|
"modified": "2026-02-17T19:39:51.884743Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--710e5b57-dda6-49d0-8626-1de690672b0a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a98d39d6-064d-4438-9ecc-b1d246cf7130",
|
|
"created": "2026-02-17T19:39:51.884818Z",
|
|
"modified": "2026-02-17T19:39:51.884818Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nassosblog.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.884818Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--83bbc7ba-62ce-481b-bf44-3325a46cee4f",
|
|
"created": "2026-02-17T19:39:51.885116Z",
|
|
"modified": "2026-02-17T19:39:51.885116Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a98d39d6-064d-4438-9ecc-b1d246cf7130",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3adc259a-b676-4cd3-b130-2445acd7d3e9",
|
|
"created": "2026-02-17T19:39:51.88519Z",
|
|
"modified": "2026-02-17T19:39:51.88519Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='solargroup.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.88519Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2ebad6a7-a5ea-4b43-94d4-b836f0814cae",
|
|
"created": "2026-02-17T19:39:51.885542Z",
|
|
"modified": "2026-02-17T19:39:51.885542Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3adc259a-b676-4cd3-b130-2445acd7d3e9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8b63265f-596b-44cd-857b-98efac580074",
|
|
"created": "2026-02-17T19:39:51.885618Z",
|
|
"modified": "2026-02-17T19:39:51.885618Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='niceonesa.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.885618Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ae4b0013-bea2-43ca-a01f-0ed14b584cb7",
|
|
"created": "2026-02-17T19:39:51.885916Z",
|
|
"modified": "2026-02-17T19:39:51.885916Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8b63265f-596b-44cd-857b-98efac580074",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c44b931b-d2c8-41a1-9d97-62d0a6a8b03b",
|
|
"created": "2026-02-17T19:39:51.885992Z",
|
|
"modified": "2026-02-17T19:39:51.885992Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='corporatebusinesssolution.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.885992Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e9dc3c3b-1a12-45ad-8b43-1516270cb577",
|
|
"created": "2026-02-17T19:39:51.886301Z",
|
|
"modified": "2026-02-17T19:39:51.886301Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c44b931b-d2c8-41a1-9d97-62d0a6a8b03b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--59bbc238-4bd6-415b-9159-4eb7c3ec8c8e",
|
|
"created": "2026-02-17T19:39:51.886375Z",
|
|
"modified": "2026-02-17T19:39:51.886375Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='updatetime.zone']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.886375Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6b66eea7-c66c-4b10-8381-12bcd62c5afb",
|
|
"created": "2026-02-17T19:39:51.88667Z",
|
|
"modified": "2026-02-17T19:39:51.88667Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--59bbc238-4bd6-415b-9159-4eb7c3ec8c8e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b8144d78-e8fd-4995-9934-902669392c31",
|
|
"created": "2026-02-17T19:39:51.886743Z",
|
|
"modified": "2026-02-17T19:39:51.886743Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='api-telecommunication.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.886743Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3f0666f8-72f4-4854-8592-d895b571e46d",
|
|
"created": "2026-02-17T19:39:51.887042Z",
|
|
"modified": "2026-02-17T19:39:51.887042Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b8144d78-e8fd-4995-9934-902669392c31",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3518963b-20e5-4a87-bfd8-2433ff017d1c",
|
|
"created": "2026-02-17T19:39:51.887116Z",
|
|
"modified": "2026-02-17T19:39:51.887116Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='redirto.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.887116Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a59cb03c-6286-4eaa-a7b4-f08e5e0010a8",
|
|
"created": "2026-02-17T19:39:51.887408Z",
|
|
"modified": "2026-02-17T19:39:51.887408Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3518963b-20e5-4a87-bfd8-2433ff017d1c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7af22571-1765-4ce7-a1f2-c98bc713d20c",
|
|
"created": "2026-02-17T19:39:51.887481Z",
|
|
"modified": "2026-02-17T19:39:51.887481Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='updete.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.887481Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--85dadca8-9498-45d7-a512-955e7b2a1bb4",
|
|
"created": "2026-02-17T19:39:51.887769Z",
|
|
"modified": "2026-02-17T19:39:51.887769Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7af22571-1765-4ce7-a1f2-c98bc713d20c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--84bf15d5-ac20-49d4-a95c-1399b8498c4a",
|
|
"created": "2026-02-17T19:39:51.887842Z",
|
|
"modified": "2026-02-17T19:39:51.887842Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='t-ready.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.887842Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6db25086-0d68-4a1c-8f83-f1811f7b8dd6",
|
|
"created": "2026-02-17T19:39:51.888131Z",
|
|
"modified": "2026-02-17T19:39:51.888131Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--84bf15d5-ac20-49d4-a95c-1399b8498c4a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8e8b912c-2b9c-4255-98bf-95a35c625ce4",
|
|
"created": "2026-02-17T19:39:51.888205Z",
|
|
"modified": "2026-02-17T19:39:51.888205Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='niceonase.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.888205Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2627419d-4e68-4c1d-b6b7-4887d55f8ed7",
|
|
"created": "2026-02-17T19:39:51.8885Z",
|
|
"modified": "2026-02-17T19:39:51.8885Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8e8b912c-2b9c-4255-98bf-95a35c625ce4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0c807738-0f8d-492f-86ab-91f0d74e19c7",
|
|
"created": "2026-02-17T19:39:51.888573Z",
|
|
"modified": "2026-02-17T19:39:51.888573Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='flytaps.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.888573Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--65e00a38-7f25-47a3-a66a-801b93e3fddc",
|
|
"created": "2026-02-17T19:39:51.888933Z",
|
|
"modified": "2026-02-17T19:39:51.888933Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0c807738-0f8d-492f-86ab-91f0d74e19c7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--511f3643-199a-45bf-a8a3-39efddb0cb4b",
|
|
"created": "2026-02-17T19:39:51.889014Z",
|
|
"modified": "2026-02-17T19:39:51.889014Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jumia-egy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.889014Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--09750d1b-8011-4193-bbc7-551bcf122c05",
|
|
"created": "2026-02-17T19:39:51.889324Z",
|
|
"modified": "2026-02-17T19:39:51.889324Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--511f3643-199a-45bf-a8a3-39efddb0cb4b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9a196d22-0fe4-45f6-828d-bafb90ffdaae",
|
|
"created": "2026-02-17T19:39:51.889401Z",
|
|
"modified": "2026-02-17T19:39:51.889401Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='onlinewebinarmarketing.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.889401Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--34ed75de-78b8-4297-9a79-dc2d1d06691d",
|
|
"created": "2026-02-17T19:39:51.889702Z",
|
|
"modified": "2026-02-17T19:39:51.889702Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9a196d22-0fe4-45f6-828d-bafb90ffdaae",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8a47e90e-c32a-4b27-8de5-09519c363863",
|
|
"created": "2026-02-17T19:39:51.889775Z",
|
|
"modified": "2026-02-17T19:39:51.889775Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='peticaonline.comv']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.889775Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8daa3c43-f25d-47a6-b7ac-d569ed1daae9",
|
|
"created": "2026-02-17T19:39:51.890069Z",
|
|
"modified": "2026-02-17T19:39:51.890069Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8a47e90e-c32a-4b27-8de5-09519c363863",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b89cb7a3-951d-4af1-a4f4-5178f02d6132",
|
|
"created": "2026-02-17T19:39:51.890142Z",
|
|
"modified": "2026-02-17T19:39:51.890142Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='myfcbk.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.890142Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--52c64d7b-00ab-42a6-bc46-7110a594d11a",
|
|
"created": "2026-02-17T19:39:51.890431Z",
|
|
"modified": "2026-02-17T19:39:51.890431Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b89cb7a3-951d-4af1-a4f4-5178f02d6132",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--745460f8-5bda-4a5c-96a0-fdc6ec26fbf3",
|
|
"created": "2026-02-17T19:39:51.890503Z",
|
|
"modified": "2026-02-17T19:39:51.890503Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gosokm.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.890503Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8a65735b-d9aa-4082-b228-3ac3461f4f08",
|
|
"created": "2026-02-17T19:39:51.890796Z",
|
|
"modified": "2026-02-17T19:39:51.890796Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--745460f8-5bda-4a5c-96a0-fdc6ec26fbf3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cda5f51e-844d-4bc4-812b-334f42ffe02a",
|
|
"created": "2026-02-17T19:39:51.890871Z",
|
|
"modified": "2026-02-17T19:39:51.890871Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='eagerfox.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.890871Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2cc98433-aa3a-4224-aec7-104e4aaebeb8",
|
|
"created": "2026-02-17T19:39:51.891161Z",
|
|
"modified": "2026-02-17T19:39:51.891161Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cda5f51e-844d-4bc4-812b-334f42ffe02a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9fb2d524-f2ee-4e24-b24a-824b0d03b2a6",
|
|
"created": "2026-02-17T19:39:51.891235Z",
|
|
"modified": "2026-02-17T19:39:51.891235Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lnkedin.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.891235Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--68174546-d088-4736-99a6-1d2218790f6f",
|
|
"created": "2026-02-17T19:39:51.891528Z",
|
|
"modified": "2026-02-17T19:39:51.891528Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9fb2d524-f2ee-4e24-b24a-824b0d03b2a6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1ace4dbc-1943-4ad8-91bf-3bab614544db",
|
|
"created": "2026-02-17T19:39:51.891603Z",
|
|
"modified": "2026-02-17T19:39:51.891603Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fisherman.engine.ninja']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.891603Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a3c6eb84-9e46-4602-a0b7-930599bf138c",
|
|
"created": "2026-02-17T19:39:51.891902Z",
|
|
"modified": "2026-02-17T19:39:51.891902Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1ace4dbc-1943-4ad8-91bf-3bab614544db",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ec30540c-a611-4d11-a4c6-7ff9f3356230",
|
|
"created": "2026-02-17T19:39:51.891976Z",
|
|
"modified": "2026-02-17T19:39:51.891976Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shortly.work']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.891976Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f0305319-dd1e-4138-8135-15f46893d26f",
|
|
"created": "2026-02-17T19:39:51.892331Z",
|
|
"modified": "2026-02-17T19:39:51.892331Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ec30540c-a611-4d11-a4c6-7ff9f3356230",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0413adc6-100e-4672-b11c-b956a8c3dcde",
|
|
"created": "2026-02-17T19:39:51.892407Z",
|
|
"modified": "2026-02-17T19:39:51.892407Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='koenigseggg.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.892407Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--df50b069-0f0a-46d5-95e0-7b6303973b97",
|
|
"created": "2026-02-17T19:39:51.892704Z",
|
|
"modified": "2026-02-17T19:39:51.892704Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0413adc6-100e-4672-b11c-b956a8c3dcde",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8b965ea4-ae17-4719-9e83-aea349b10842",
|
|
"created": "2026-02-17T19:39:51.892779Z",
|
|
"modified": "2026-02-17T19:39:51.892779Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='syncupdate.site']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.892779Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f9270f98-5b0c-46f2-b58c-5fbaf8eeaa67",
|
|
"created": "2026-02-17T19:39:51.893073Z",
|
|
"modified": "2026-02-17T19:39:51.893073Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8b965ea4-ae17-4719-9e83-aea349b10842",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--23f9baf4-766e-4c68-8780-820991de5b26",
|
|
"created": "2026-02-17T19:39:51.893148Z",
|
|
"modified": "2026-02-17T19:39:51.893148Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtubesyncapi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.893148Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cf7bdb30-6aee-4295-a0b3-6a043bf7f6ff",
|
|
"created": "2026-02-17T19:39:51.893448Z",
|
|
"modified": "2026-02-17T19:39:51.893448Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--23f9baf4-766e-4c68-8780-820991de5b26",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--73679ce1-88ac-46ea-8c22-1bc38d6fced2",
|
|
"created": "2026-02-17T19:39:51.893521Z",
|
|
"modified": "2026-02-17T19:39:51.893521Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ps2link.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.893521Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--19f80950-b2f9-4bc6-8975-8966ca482907",
|
|
"created": "2026-02-17T19:39:51.893809Z",
|
|
"modified": "2026-02-17T19:39:51.893809Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--73679ce1-88ac-46ea-8c22-1bc38d6fced2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--01eaf9a8-f37b-4ed1-a903-c4db01725b17",
|
|
"created": "2026-02-17T19:39:51.893882Z",
|
|
"modified": "2026-02-17T19:39:51.893882Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='hopnope.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.893882Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f563b7a6-33e1-41a0-a2d5-0fee802907dc",
|
|
"created": "2026-02-17T19:39:51.894169Z",
|
|
"modified": "2026-02-17T19:39:51.894169Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--01eaf9a8-f37b-4ed1-a903-c4db01725b17",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0d2fff7d-276c-4947-8d18-2cb890f49a15",
|
|
"created": "2026-02-17T19:39:51.894242Z",
|
|
"modified": "2026-02-17T19:39:51.894242Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ztb-news.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.894242Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dad58fce-6780-46bc-84bd-7eb554565327",
|
|
"created": "2026-02-17T19:39:51.894531Z",
|
|
"modified": "2026-02-17T19:39:51.894531Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0d2fff7d-276c-4947-8d18-2cb890f49a15",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d0a82795-d860-4155-9570-9fe7b55f9c44",
|
|
"created": "2026-02-17T19:39:51.894604Z",
|
|
"modified": "2026-02-17T19:39:51.894604Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='dw-news.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.894604Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5c342fba-0433-4a84-95c1-cf8cc17c5d90",
|
|
"created": "2026-02-17T19:39:51.894891Z",
|
|
"modified": "2026-02-17T19:39:51.894891Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d0a82795-d860-4155-9570-9fe7b55f9c44",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d209258c-9e8e-463a-bbfc-11ea068ae21d",
|
|
"created": "2026-02-17T19:39:51.894964Z",
|
|
"modified": "2026-02-17T19:39:51.894964Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wavekli.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.894964Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f0d833a9-feea-4fd1-b229-fa35f4d52978",
|
|
"created": "2026-02-17T19:39:51.895254Z",
|
|
"modified": "2026-02-17T19:39:51.895254Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d209258c-9e8e-463a-bbfc-11ea068ae21d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d9b96f6d-c631-4a06-b729-633674a625c2",
|
|
"created": "2026-02-17T19:39:51.895329Z",
|
|
"modified": "2026-02-17T19:39:51.895329Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gostosadeluxo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.895329Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0a38e6d7-a10b-48b9-be35-21570731d141",
|
|
"created": "2026-02-17T19:39:51.895687Z",
|
|
"modified": "2026-02-17T19:39:51.895687Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d9b96f6d-c631-4a06-b729-633674a625c2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9af5b2da-7286-4e1d-b342-72954b9069a1",
|
|
"created": "2026-02-17T19:39:51.895762Z",
|
|
"modified": "2026-02-17T19:39:51.895762Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vestinfo.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.895762Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0a15e9c1-28f2-463f-b3ca-f4fbf36a7ca5",
|
|
"created": "2026-02-17T19:39:51.896056Z",
|
|
"modified": "2026-02-17T19:39:51.896056Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9af5b2da-7286-4e1d-b342-72954b9069a1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0565d0c5-aa72-41cd-956f-d1e2d17ab411",
|
|
"created": "2026-02-17T19:39:51.89613Z",
|
|
"modified": "2026-02-17T19:39:51.89613Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='infosms-a.site']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.89613Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1512ef7e-7b06-4097-9eed-e40d2d97da41",
|
|
"created": "2026-02-17T19:39:51.89642Z",
|
|
"modified": "2026-02-17T19:39:51.89642Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0565d0c5-aa72-41cd-956f-d1e2d17ab411",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--03226506-fffb-4762-a335-26a2b858e215",
|
|
"created": "2026-02-17T19:39:51.896494Z",
|
|
"modified": "2026-02-17T19:39:51.896494Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nemshi-news.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.896494Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a8faf3a2-829f-48c4-a37d-3ae40897e6cf",
|
|
"created": "2026-02-17T19:39:51.896789Z",
|
|
"modified": "2026-02-17T19:39:51.896789Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--03226506-fffb-4762-a335-26a2b858e215",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--22a1ae19-fad0-4860-8bc2-1a1ee3f9d7ca",
|
|
"created": "2026-02-17T19:39:51.896863Z",
|
|
"modified": "2026-02-17T19:39:51.896863Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='zougla.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.896863Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4dba1093-6595-4756-b2d2-d3e4d9eea8f6",
|
|
"created": "2026-02-17T19:39:51.897153Z",
|
|
"modified": "2026-02-17T19:39:51.897153Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--22a1ae19-fad0-4860-8bc2-1a1ee3f9d7ca",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dcde63b2-a957-492a-be21-62aa4a318593",
|
|
"created": "2026-02-17T19:39:51.897226Z",
|
|
"modified": "2026-02-17T19:39:51.897226Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='smallme.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.897226Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1e6c6585-6d8a-4dd4-87e7-dbb0eb343891",
|
|
"created": "2026-02-17T19:39:51.897531Z",
|
|
"modified": "2026-02-17T19:39:51.897531Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dcde63b2-a957-492a-be21-62aa4a318593",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--35654840-c8b7-4b2b-9aee-4994af36397c",
|
|
"created": "2026-02-17T19:39:51.897605Z",
|
|
"modified": "2026-02-17T19:39:51.897605Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bit-li.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.897605Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8ea68aaf-3cad-40cc-98a9-472a7224a3ae",
|
|
"created": "2026-02-17T19:39:51.897894Z",
|
|
"modified": "2026-02-17T19:39:51.897894Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--35654840-c8b7-4b2b-9aee-4994af36397c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cda9fcad-411b-48da-85e5-bab58f7e9555",
|
|
"created": "2026-02-17T19:39:51.897966Z",
|
|
"modified": "2026-02-17T19:39:51.897966Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='highclub.life']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.897966Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b32500d7-ba37-4cda-86dd-9dd8a50ee133",
|
|
"created": "2026-02-17T19:39:51.898258Z",
|
|
"modified": "2026-02-17T19:39:51.898258Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cda9fcad-411b-48da-85e5-bab58f7e9555",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4abc6eeb-6db1-494f-a0b0-42ded516a74b",
|
|
"created": "2026-02-17T19:39:51.898336Z",
|
|
"modified": "2026-02-17T19:39:51.898336Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='snapfire.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.898336Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d4ad4a1a-43eb-4a00-b826-1c09e75ea845",
|
|
"created": "2026-02-17T19:39:51.898628Z",
|
|
"modified": "2026-02-17T19:39:51.898628Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4abc6eeb-6db1-494f-a0b0-42ded516a74b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2d1538ee-6cd1-44f6-a0f7-ce6669ce1d9d",
|
|
"created": "2026-02-17T19:39:51.898701Z",
|
|
"modified": "2026-02-17T19:39:51.898701Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sec-flare.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.898701Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8dafe9fe-6bb3-4abc-9b03-8e7b96746ff6",
|
|
"created": "2026-02-17T19:39:51.899054Z",
|
|
"modified": "2026-02-17T19:39:51.899054Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2d1538ee-6cd1-44f6-a0f7-ce6669ce1d9d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2a192c58-1f38-4446-b3c3-62051130e3d7",
|
|
"created": "2026-02-17T19:39:51.899128Z",
|
|
"modified": "2026-02-17T19:39:51.899128Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='webaffise.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.899128Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1abb913f-713a-47e3-88f9-f0d86098960d",
|
|
"created": "2026-02-17T19:39:51.899419Z",
|
|
"modified": "2026-02-17T19:39:51.899419Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2a192c58-1f38-4446-b3c3-62051130e3d7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7c54015d-8216-4e44-96bd-ab15835de813",
|
|
"created": "2026-02-17T19:39:51.899493Z",
|
|
"modified": "2026-02-17T19:39:51.899493Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='api-apple-buy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.899493Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--077fabf0-7fdc-4413-aad8-f781eb097f08",
|
|
"created": "2026-02-17T19:39:51.899785Z",
|
|
"modified": "2026-02-17T19:39:51.899785Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7c54015d-8216-4e44-96bd-ab15835de813",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--668290db-7627-4e1b-947c-d68a8e63c5ef",
|
|
"created": "2026-02-17T19:39:51.899859Z",
|
|
"modified": "2026-02-17T19:39:51.899859Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='instagam.photos']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.899859Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c44c78f7-5f50-4fcd-8224-a8e29aa6e2db",
|
|
"created": "2026-02-17T19:39:51.900149Z",
|
|
"modified": "2026-02-17T19:39:51.900149Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--668290db-7627-4e1b-947c-d68a8e63c5ef",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5707fa6c-27ee-452c-ae63-19725640a53d",
|
|
"created": "2026-02-17T19:39:51.900222Z",
|
|
"modified": "2026-02-17T19:39:51.900222Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kormoran.bid']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.900222Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--61d75dbc-37e5-47a3-a792-1fdf99948cd3",
|
|
"created": "2026-02-17T19:39:51.900512Z",
|
|
"modified": "2026-02-17T19:39:51.900512Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5707fa6c-27ee-452c-ae63-19725640a53d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--117bc680-d37a-4d54-9f8b-d598b5848d78",
|
|
"created": "2026-02-17T19:39:51.900584Z",
|
|
"modified": "2026-02-17T19:39:51.900584Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='instegram.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.900584Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b9b388a1-a3be-4811-82ea-060056ee59df",
|
|
"created": "2026-02-17T19:39:51.900875Z",
|
|
"modified": "2026-02-17T19:39:51.900875Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--117bc680-d37a-4d54-9f8b-d598b5848d78",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ef3a8bd3-6deb-4bdc-a1a7-5bf808b48ace",
|
|
"created": "2026-02-17T19:39:51.900948Z",
|
|
"modified": "2026-02-17T19:39:51.900948Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='showsme.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.900948Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--86f1c7c4-3643-4246-96fe-8285103d29ff",
|
|
"created": "2026-02-17T19:39:51.901238Z",
|
|
"modified": "2026-02-17T19:39:51.901238Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ef3a8bd3-6deb-4bdc-a1a7-5bf808b48ace",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8c4de89d-3818-4bc7-91d5-44802bc75b9e",
|
|
"created": "2026-02-17T19:39:51.901312Z",
|
|
"modified": "2026-02-17T19:39:51.901312Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='candidaturassonangol.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.901312Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--59a12690-4aa4-490a-8c54-0171f1b2b46e",
|
|
"created": "2026-02-17T19:39:51.901611Z",
|
|
"modified": "2026-02-17T19:39:51.901611Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8c4de89d-3818-4bc7-91d5-44802bc75b9e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--534708b2-7453-4aa0-9e20-c99919fe0acc",
|
|
"created": "2026-02-17T19:39:51.901683Z",
|
|
"modified": "2026-02-17T19:39:51.901683Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ckforward.one']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.901683Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fc87249a-11af-4637-a152-ac2424b2d49a",
|
|
"created": "2026-02-17T19:39:51.901976Z",
|
|
"modified": "2026-02-17T19:39:51.901976Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--534708b2-7453-4aa0-9e20-c99919fe0acc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6e9dcdb1-8951-44df-b9f6-018ef2704035",
|
|
"created": "2026-02-17T19:39:51.902049Z",
|
|
"modified": "2026-02-17T19:39:51.902049Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fastnews.biz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.902049Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3a6702fb-0d89-4f7e-b731-5832b8ee4e95",
|
|
"created": "2026-02-17T19:39:51.902404Z",
|
|
"modified": "2026-02-17T19:39:51.902404Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6e9dcdb1-8951-44df-b9f6-018ef2704035",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--33bc6462-668b-4525-b901-f604d204ab08",
|
|
"created": "2026-02-17T19:39:51.90248Z",
|
|
"modified": "2026-02-17T19:39:51.90248Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='smcu.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.90248Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--79530496-a20c-46da-a10e-d37db7730210",
|
|
"created": "2026-02-17T19:39:51.902768Z",
|
|
"modified": "2026-02-17T19:39:51.902768Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--33bc6462-668b-4525-b901-f604d204ab08",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--44de85ad-8354-4c18-b33d-09eea2aed995",
|
|
"created": "2026-02-17T19:39:51.902843Z",
|
|
"modified": "2026-02-17T19:39:51.902843Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tvxs.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.902843Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c755a014-977c-46a6-b06e-fbac8047e142",
|
|
"created": "2026-02-17T19:39:51.90313Z",
|
|
"modified": "2026-02-17T19:39:51.90313Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--44de85ad-8354-4c18-b33d-09eea2aed995",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3eaee95d-c2cf-4a1b-b823-c091a8f5f960",
|
|
"created": "2026-02-17T19:39:51.903203Z",
|
|
"modified": "2026-02-17T19:39:51.903203Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mlinks.ws']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.903203Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--692a5171-6e06-40ca-824b-448258ac0a58",
|
|
"created": "2026-02-17T19:39:51.903492Z",
|
|
"modified": "2026-02-17T19:39:51.903492Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3eaee95d-c2cf-4a1b-b823-c091a8f5f960",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cd539e4b-590a-4ca2-94ab-ae80e0824444",
|
|
"created": "2026-02-17T19:39:51.903566Z",
|
|
"modified": "2026-02-17T19:39:51.903566Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='livingwithbadkidny.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.903566Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--64d5e43f-8f29-4359-84a5-deb27d6c83e4",
|
|
"created": "2026-02-17T19:39:51.903861Z",
|
|
"modified": "2026-02-17T19:39:51.903861Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cd539e4b-590a-4ca2-94ab-ae80e0824444",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--920b763d-acd5-4e6a-8588-176422a7383a",
|
|
"created": "2026-02-17T19:39:51.903935Z",
|
|
"modified": "2026-02-17T19:39:51.903935Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='2y4nothing.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.903935Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0957cafd-ea00-4223-8b81-0b597e39ba9d",
|
|
"created": "2026-02-17T19:39:51.904224Z",
|
|
"modified": "2026-02-17T19:39:51.904224Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--920b763d-acd5-4e6a-8588-176422a7383a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b9c18cf3-a5ad-41dc-b6d2-43a32020979e",
|
|
"created": "2026-02-17T19:39:51.904298Z",
|
|
"modified": "2026-02-17T19:39:51.904298Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='t-bit.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.904298Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--184dea1d-f93f-42a1-b1fc-6afd01fde346",
|
|
"created": "2026-02-17T19:39:51.904585Z",
|
|
"modified": "2026-02-17T19:39:51.904585Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b9c18cf3-a5ad-41dc-b6d2-43a32020979e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e956537c-a1b2-4d1c-b340-6e4692d2174c",
|
|
"created": "2026-02-17T19:39:51.904661Z",
|
|
"modified": "2026-02-17T19:39:51.904661Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='eventes.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.904661Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1d37a38b-67bd-4380-af1b-32ef882d1e37",
|
|
"created": "2026-02-17T19:39:51.904949Z",
|
|
"modified": "2026-02-17T19:39:51.904949Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e956537c-a1b2-4d1c-b340-6e4692d2174c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f9aa2926-ff16-4fa6-a369-3728d21787f6",
|
|
"created": "2026-02-17T19:39:51.905022Z",
|
|
"modified": "2026-02-17T19:39:51.905022Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='supportset.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.905022Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d5da87d6-9391-4642-9b85-f57d13c31652",
|
|
"created": "2026-02-17T19:39:51.905313Z",
|
|
"modified": "2026-02-17T19:39:51.905313Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f9aa2926-ff16-4fa6-a369-3728d21787f6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bcce9db3-be26-4713-a08b-a5e69b3d15df",
|
|
"created": "2026-02-17T19:39:51.905386Z",
|
|
"modified": "2026-02-17T19:39:51.905386Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='magnum-kz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.905386Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7441b507-ed70-4f07-a819-39b156ad0247",
|
|
"created": "2026-02-17T19:39:51.905743Z",
|
|
"modified": "2026-02-17T19:39:51.905743Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bcce9db3-be26-4713-a08b-a5e69b3d15df",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--999f4d95-f33b-4622-bb70-aef87975c897",
|
|
"created": "2026-02-17T19:39:51.905825Z",
|
|
"modified": "2026-02-17T19:39:51.905825Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='olexegy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.905825Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9a9b0599-1dc8-46f3-956b-90593d930d59",
|
|
"created": "2026-02-17T19:39:51.906122Z",
|
|
"modified": "2026-02-17T19:39:51.906122Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--999f4d95-f33b-4622-bb70-aef87975c897",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5993dec0-5fcb-42d5-bffe-2e755f02e7c1",
|
|
"created": "2026-02-17T19:39:51.906195Z",
|
|
"modified": "2026-02-17T19:39:51.906195Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtub-eg.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.906195Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3d1a792c-bf79-47e6-930f-64b8abc52059",
|
|
"created": "2026-02-17T19:39:51.906486Z",
|
|
"modified": "2026-02-17T19:39:51.906486Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5993dec0-5fcb-42d5-bffe-2e755f02e7c1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d9cec40c-ca60-4f46-b3b2-774e8c58896b",
|
|
"created": "2026-02-17T19:39:51.90656Z",
|
|
"modified": "2026-02-17T19:39:51.90656Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gulfsports.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.90656Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2e194622-5c9f-4fac-9e84-86681695c006",
|
|
"created": "2026-02-17T19:39:51.906854Z",
|
|
"modified": "2026-02-17T19:39:51.906854Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d9cec40c-ca60-4f46-b3b2-774e8c58896b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--106d35cb-7dd1-499b-9e7f-ba9b4bbec552",
|
|
"created": "2026-02-17T19:39:51.906927Z",
|
|
"modified": "2026-02-17T19:39:51.906927Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kohaicorp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.906927Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--528653f3-bc67-4354-a10f-64837619592a",
|
|
"created": "2026-02-17T19:39:51.907219Z",
|
|
"modified": "2026-02-17T19:39:51.907219Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--106d35cb-7dd1-499b-9e7f-ba9b4bbec552",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--de19daa0-3981-4c1e-bfc0-0aa26ee109cc",
|
|
"created": "2026-02-17T19:39:51.907295Z",
|
|
"modified": "2026-02-17T19:39:51.907295Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='politique-koaci.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.907295Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a95e0eee-bfff-4b39-8c4b-e1abc7a6bf2c",
|
|
"created": "2026-02-17T19:39:51.907592Z",
|
|
"modified": "2026-02-17T19:39:51.907592Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--de19daa0-3981-4c1e-bfc0-0aa26ee109cc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--39a64e5c-5953-43d0-beed-9527b724b77c",
|
|
"created": "2026-02-17T19:39:51.907669Z",
|
|
"modified": "2026-02-17T19:39:51.907669Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='yallakora-egy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.907669Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3594a7e1-d6a9-4cdd-b3f3-a528b3195707",
|
|
"created": "2026-02-17T19:39:51.907964Z",
|
|
"modified": "2026-02-17T19:39:51.907964Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--39a64e5c-5953-43d0-beed-9527b724b77c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--55cbc335-43e6-4da4-b407-7f27b1514cd0",
|
|
"created": "2026-02-17T19:39:51.908038Z",
|
|
"modified": "2026-02-17T19:39:51.908038Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ferrari.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.908038Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7b129b2c-6dd5-49b4-ba77-d88fbb0bd238",
|
|
"created": "2026-02-17T19:39:51.908329Z",
|
|
"modified": "2026-02-17T19:39:51.908329Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--55cbc335-43e6-4da4-b407-7f27b1514cd0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--07daf8f3-8ca1-46d5-a5d8-8716b1c62a88",
|
|
"created": "2026-02-17T19:39:51.908402Z",
|
|
"modified": "2026-02-17T19:39:51.908402Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tiol.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.908402Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--24e31b31-c5f6-4e02-88e7-ecb054f32a1a",
|
|
"created": "2026-02-17T19:39:51.90869Z",
|
|
"modified": "2026-02-17T19:39:51.90869Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--07daf8f3-8ca1-46d5-a5d8-8716b1c62a88",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9057548c-df37-4ff2-9e61-9b1779522eb6",
|
|
"created": "2026-02-17T19:39:51.908764Z",
|
|
"modified": "2026-02-17T19:39:51.908764Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vouliwatch.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.908764Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--22ed85d0-e1ce-43d1-aa3b-6538335e34cd",
|
|
"created": "2026-02-17T19:39:51.909124Z",
|
|
"modified": "2026-02-17T19:39:51.909124Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9057548c-df37-4ff2-9e61-9b1779522eb6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1e755742-dff1-4f1a-a111-2a54b2271926",
|
|
"created": "2026-02-17T19:39:51.909199Z",
|
|
"modified": "2026-02-17T19:39:51.909199Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fr-monde.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.909199Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--71bc9788-d0fd-4e0b-bbe2-ced4a7de3a28",
|
|
"created": "2026-02-17T19:39:51.90949Z",
|
|
"modified": "2026-02-17T19:39:51.90949Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1e755742-dff1-4f1a-a111-2a54b2271926",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0e345cf9-c929-4489-aced-584f311f603e",
|
|
"created": "2026-02-17T19:39:51.909563Z",
|
|
"modified": "2026-02-17T19:39:51.909563Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='hellasjournal.company']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.909563Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b74819d3-6ea1-453f-9f39-9ed3a37e0955",
|
|
"created": "2026-02-17T19:39:51.90986Z",
|
|
"modified": "2026-02-17T19:39:51.90986Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0e345cf9-c929-4489-aced-584f311f603e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--367dec9f-1202-4e04-9d46-80e83221a1bf",
|
|
"created": "2026-02-17T19:39:51.909933Z",
|
|
"modified": "2026-02-17T19:39:51.909933Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newslive2.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.909933Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--85915079-3485-4ec9-9225-5d58d86228b3",
|
|
"created": "2026-02-17T19:39:51.910222Z",
|
|
"modified": "2026-02-17T19:39:51.910222Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--367dec9f-1202-4e04-9d46-80e83221a1bf",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a7b9f12f-bb42-4fbd-b001-0749a2696536",
|
|
"created": "2026-02-17T19:39:51.910294Z",
|
|
"modified": "2026-02-17T19:39:51.910294Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='in-politics.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.910294Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--50297998-cb60-40e4-80e2-b77ae342a5d0",
|
|
"created": "2026-02-17T19:39:51.910585Z",
|
|
"modified": "2026-02-17T19:39:51.910585Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a7b9f12f-bb42-4fbd-b001-0749a2696536",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8b4df195-36d3-4341-a31a-d6ac8df61f5c",
|
|
"created": "2026-02-17T19:39:51.910659Z",
|
|
"modified": "2026-02-17T19:39:51.910659Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='itly.link']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.910659Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9825f84e-c3cc-4bc7-b883-7f4ecaf6a740",
|
|
"created": "2026-02-17T19:39:51.910954Z",
|
|
"modified": "2026-02-17T19:39:51.910954Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8b4df195-36d3-4341-a31a-d6ac8df61f5c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d29c69b6-7ac8-4643-a02b-9ae5b263c831",
|
|
"created": "2026-02-17T19:39:51.911026Z",
|
|
"modified": "2026-02-17T19:39:51.911026Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mundodenoticias.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.911026Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--eaee4e8c-df82-4ca6-8a4c-da7b6c511da0",
|
|
"created": "2026-02-17T19:39:51.911325Z",
|
|
"modified": "2026-02-17T19:39:51.911325Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d29c69b6-7ac8-4643-a02b-9ae5b263c831",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cf99e4db-2a07-426e-878c-6d68aa1e3a4f",
|
|
"created": "2026-02-17T19:39:51.911398Z",
|
|
"modified": "2026-02-17T19:39:51.911398Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ewish.cards']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.911398Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a516ff65-6d82-46a8-bc00-1fb357438d95",
|
|
"created": "2026-02-17T19:39:51.911684Z",
|
|
"modified": "2026-02-17T19:39:51.911684Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cf99e4db-2a07-426e-878c-6d68aa1e3a4f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ff3bc61b-f0ed-4c6a-8afe-adcdedd0489a",
|
|
"created": "2026-02-17T19:39:51.911756Z",
|
|
"modified": "2026-02-17T19:39:51.911756Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='skollie.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.911756Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--52d313fb-f25b-4fce-b167-162262cab6f4",
|
|
"created": "2026-02-17T19:39:51.912048Z",
|
|
"modified": "2026-02-17T19:39:51.912048Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ff3bc61b-f0ed-4c6a-8afe-adcdedd0489a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0df0fb0d-9edd-41a5-abdd-69dcf5ce21a9",
|
|
"created": "2026-02-17T19:39:51.91212Z",
|
|
"modified": "2026-02-17T19:39:51.91212Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='redirecting.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.91212Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--971fb42c-41c5-424e-a482-69c2cdb42e9a",
|
|
"created": "2026-02-17T19:39:51.912474Z",
|
|
"modified": "2026-02-17T19:39:51.912474Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0df0fb0d-9edd-41a5-abdd-69dcf5ce21a9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1e4ffce3-b254-4b10-96cd-faee8dd9c2fd",
|
|
"created": "2026-02-17T19:39:51.912548Z",
|
|
"modified": "2026-02-17T19:39:51.912548Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='iibt.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.912548Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0c60c84f-c849-4eeb-9ae3-fe259e493c50",
|
|
"created": "2026-02-17T19:39:51.912838Z",
|
|
"modified": "2026-02-17T19:39:51.912838Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1e4ffce3-b254-4b10-96cd-faee8dd9c2fd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fa542146-286f-4f2a-bb75-0c90e0ea74af",
|
|
"created": "2026-02-17T19:39:51.912912Z",
|
|
"modified": "2026-02-17T19:39:51.912912Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='xyvok.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.912912Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f9d00163-687f-4306-98f9-de0e7c6ff889",
|
|
"created": "2026-02-17T19:39:51.913254Z",
|
|
"modified": "2026-02-17T19:39:51.913254Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fa542146-286f-4f2a-bb75-0c90e0ea74af",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a3c4c2f8-2022-4b12-a89b-48cae2c7e5bd",
|
|
"created": "2026-02-17T19:39:51.913329Z",
|
|
"modified": "2026-02-17T19:39:51.913329Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='weathersite.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.913329Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cfc2c9b4-4691-4bc9-b239-bff191de29ed",
|
|
"created": "2026-02-17T19:39:51.913626Z",
|
|
"modified": "2026-02-17T19:39:51.913626Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a3c4c2f8-2022-4b12-a89b-48cae2c7e5bd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fea0ac5e-5cf5-4f9c-9fae-3dc41330fb6b",
|
|
"created": "2026-02-17T19:39:51.9137Z",
|
|
"modified": "2026-02-17T19:39:51.9137Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='speedygonzales.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.9137Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b993b502-f91a-4804-bfc3-dee6c1a55ddf",
|
|
"created": "2026-02-17T19:39:51.913995Z",
|
|
"modified": "2026-02-17T19:39:51.913995Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fea0ac5e-5cf5-4f9c-9fae-3dc41330fb6b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f07d7a52-8eab-4ccc-af27-7aa2866d508e",
|
|
"created": "2026-02-17T19:39:51.914071Z",
|
|
"modified": "2026-02-17T19:39:51.914071Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bni-madagascar.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.914071Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--71d541b4-3181-4c1d-b704-2ff8413790eb",
|
|
"created": "2026-02-17T19:39:51.914429Z",
|
|
"modified": "2026-02-17T19:39:51.914429Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f07d7a52-8eab-4ccc-af27-7aa2866d508e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ce49ff05-25a2-4c61-9665-9ad22682f34f",
|
|
"created": "2026-02-17T19:39:51.914511Z",
|
|
"modified": "2026-02-17T19:39:51.914511Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ube.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.914511Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7406c946-c202-4056-b99a-678ab0ab2173",
|
|
"created": "2026-02-17T19:39:51.914808Z",
|
|
"modified": "2026-02-17T19:39:51.914808Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ce49ff05-25a2-4c61-9665-9ad22682f34f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e490ffbc-a35f-4e45-8857-7add2e065cc4",
|
|
"created": "2026-02-17T19:39:51.914883Z",
|
|
"modified": "2026-02-17T19:39:51.914883Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='paok-24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.914883Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--105704f6-d98d-43c7-ba49-7455b946c59a",
|
|
"created": "2026-02-17T19:39:51.915183Z",
|
|
"modified": "2026-02-17T19:39:51.915183Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e490ffbc-a35f-4e45-8857-7add2e065cc4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5a621a6a-6ead-4cb5-bd3e-b19af99ba3b7",
|
|
"created": "2026-02-17T19:39:51.915259Z",
|
|
"modified": "2026-02-17T19:39:51.915259Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shortely.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.915259Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b614175d-8bb0-4647-91da-e879bec32529",
|
|
"created": "2026-02-17T19:39:51.915556Z",
|
|
"modified": "2026-02-17T19:39:51.915556Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5a621a6a-6ead-4cb5-bd3e-b19af99ba3b7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5e1d47e5-88b7-4984-9746-5d441780476b",
|
|
"created": "2026-02-17T19:39:51.915632Z",
|
|
"modified": "2026-02-17T19:39:51.915632Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jquery-updater.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.915632Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--30fa3778-a17b-41bb-b14e-c0d5340048c3",
|
|
"created": "2026-02-17T19:39:51.916005Z",
|
|
"modified": "2026-02-17T19:39:51.916005Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5e1d47e5-88b7-4984-9746-5d441780476b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--53f28d0f-67f0-42f7-ac4d-9bcde529a975",
|
|
"created": "2026-02-17T19:39:51.91608Z",
|
|
"modified": "2026-02-17T19:39:51.91608Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newzgroup.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.91608Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0a8fbc83-f380-4e8f-86a8-5c9976a8b9cc",
|
|
"created": "2026-02-17T19:39:51.916375Z",
|
|
"modified": "2026-02-17T19:39:51.916375Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--53f28d0f-67f0-42f7-ac4d-9bcde529a975",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7e298b81-3cf1-4b5c-942d-5b4abb8d62fc",
|
|
"created": "2026-02-17T19:39:51.916448Z",
|
|
"modified": "2026-02-17T19:39:51.916448Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bmw.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.916448Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1f3b659a-3063-414e-bdce-335efeed11d5",
|
|
"created": "2026-02-17T19:39:51.916737Z",
|
|
"modified": "2026-02-17T19:39:51.916737Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7e298b81-3cf1-4b5c-942d-5b4abb8d62fc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4dcc4b98-6234-46ed-9c60-778decfcf00b",
|
|
"created": "2026-02-17T19:39:51.916812Z",
|
|
"modified": "2026-02-17T19:39:51.916812Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vodafonegypt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.916812Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2a1c19fb-9d6a-4f02-bf57-065d7b8dae27",
|
|
"created": "2026-02-17T19:39:51.917104Z",
|
|
"modified": "2026-02-17T19:39:51.917104Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4dcc4b98-6234-46ed-9c60-778decfcf00b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e7800f28-035b-4a39-ab1f-309ebb6d2cd4",
|
|
"created": "2026-02-17T19:39:51.917182Z",
|
|
"modified": "2026-02-17T19:39:51.917182Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nissan.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.917182Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--74d8338a-efbc-4abc-bf25-021cb65a2deb",
|
|
"created": "2026-02-17T19:39:51.917471Z",
|
|
"modified": "2026-02-17T19:39:51.917471Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e7800f28-035b-4a39-ab1f-309ebb6d2cd4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f2029d0c-7c52-40ac-8c53-411794d9d509",
|
|
"created": "2026-02-17T19:39:51.917545Z",
|
|
"modified": "2026-02-17T19:39:51.917545Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='plinkypong.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.917545Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e1fceca5-3d73-43ea-98f2-ea30d7709d19",
|
|
"created": "2026-02-17T19:39:51.917836Z",
|
|
"modified": "2026-02-17T19:39:51.917836Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f2029d0c-7c52-40ac-8c53-411794d9d509",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bcfe763c-7c39-4f48-91e7-f14907b6b511",
|
|
"created": "2026-02-17T19:39:51.917909Z",
|
|
"modified": "2026-02-17T19:39:51.917909Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ordas-kz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.917909Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6dd0fc1c-a0c0-42a4-8bcc-bb9adaeafe47",
|
|
"created": "2026-02-17T19:39:51.9182Z",
|
|
"modified": "2026-02-17T19:39:51.9182Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bcfe763c-7c39-4f48-91e7-f14907b6b511",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fc1c6e9e-e24d-469c-b07e-2543054a9e5a",
|
|
"created": "2026-02-17T19:39:51.918273Z",
|
|
"modified": "2026-02-17T19:39:51.918273Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nabde.app']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.918273Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d39f29dd-860c-4e32-b3ae-7ce7ab77ab45",
|
|
"created": "2026-02-17T19:39:51.918562Z",
|
|
"modified": "2026-02-17T19:39:51.918562Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fc1c6e9e-e24d-469c-b07e-2543054a9e5a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3acd3d85-3d73-4e0a-81de-782f52ba6d02",
|
|
"created": "2026-02-17T19:39:51.918634Z",
|
|
"modified": "2026-02-17T19:39:51.918634Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='06g.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.918634Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--faa2ad2b-d6e8-4460-9775-dce9f2d20d1e",
|
|
"created": "2026-02-17T19:39:51.91896Z",
|
|
"modified": "2026-02-17T19:39:51.91896Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3acd3d85-3d73-4e0a-81de-782f52ba6d02",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ed5be7bd-f65a-4d44-8435-b8076c52aa75",
|
|
"created": "2026-02-17T19:39:51.919034Z",
|
|
"modified": "2026-02-17T19:39:51.919034Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='updateservice.center']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.919034Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dd110cf0-1c32-41bc-baa4-abfde9fc9736",
|
|
"created": "2026-02-17T19:39:51.919399Z",
|
|
"modified": "2026-02-17T19:39:51.919399Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ed5be7bd-f65a-4d44-8435-b8076c52aa75",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a34ee387-2c8f-4d64-84d4-a2502285d115",
|
|
"created": "2026-02-17T19:39:51.919474Z",
|
|
"modified": "2026-02-17T19:39:51.919474Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='imparcialpress.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.919474Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2ecd349b-905c-4469-81c1-f2d28924119e",
|
|
"created": "2026-02-17T19:39:51.91977Z",
|
|
"modified": "2026-02-17T19:39:51.91977Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a34ee387-2c8f-4d64-84d4-a2502285d115",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--04cec1be-cc09-4b61-acbd-349354bc2e69",
|
|
"created": "2026-02-17T19:39:51.919844Z",
|
|
"modified": "2026-02-17T19:39:51.919844Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='worldnws.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.919844Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--39de59c4-31d8-47e4-8b96-51577ffc5ec8",
|
|
"created": "2026-02-17T19:39:51.920136Z",
|
|
"modified": "2026-02-17T19:39:51.920136Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--04cec1be-cc09-4b61-acbd-349354bc2e69",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--97002436-9837-4292-89a6-7c5fcba16777",
|
|
"created": "2026-02-17T19:39:51.92021Z",
|
|
"modified": "2026-02-17T19:39:51.92021Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cosmote.center']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.92021Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3f6c66c3-ed16-439b-b6ae-ec7b055913e8",
|
|
"created": "2026-02-17T19:39:51.920499Z",
|
|
"modified": "2026-02-17T19:39:51.920499Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--97002436-9837-4292-89a6-7c5fcba16777",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--39c8e450-eaee-41c8-9208-aab0e5e94b52",
|
|
"created": "2026-02-17T19:39:51.920572Z",
|
|
"modified": "2026-02-17T19:39:51.920572Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='makeitshort.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.920572Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2d9811d2-2195-4ffe-974c-0c5422b8f74d",
|
|
"created": "2026-02-17T19:39:51.920861Z",
|
|
"modified": "2026-02-17T19:39:51.920861Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--39c8e450-eaee-41c8-9208-aab0e5e94b52",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ff9b2d-8964-44c2-8825-353713ed067d",
|
|
"created": "2026-02-17T19:39:51.920935Z",
|
|
"modified": "2026-02-17T19:39:51.920935Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='walatparez.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.920935Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--629cd780-16dd-4d84-8759-9c952a24d487",
|
|
"created": "2026-02-17T19:39:51.921227Z",
|
|
"modified": "2026-02-17T19:39:51.921227Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--57ff9b2d-8964-44c2-8825-353713ed067d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--595466ba-4766-4b0d-a901-08c0eaa1face",
|
|
"created": "2026-02-17T19:39:51.9213Z",
|
|
"modified": "2026-02-17T19:39:51.9213Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='hellottec.art']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.9213Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d3e9615c-3233-473d-b183-692c82e2f911",
|
|
"created": "2026-02-17T19:39:51.92159Z",
|
|
"modified": "2026-02-17T19:39:51.92159Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--595466ba-4766-4b0d-a901-08c0eaa1face",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7da22d12-226f-4842-a187-20027b9d630a",
|
|
"created": "2026-02-17T19:39:51.921662Z",
|
|
"modified": "2026-02-17T19:39:51.921662Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cellconn.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.921662Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b2a0f548-42ef-486a-a4e3-2914fb9fc544",
|
|
"created": "2026-02-17T19:39:51.921951Z",
|
|
"modified": "2026-02-17T19:39:51.921951Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7da22d12-226f-4842-a187-20027b9d630a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--88686edf-549e-4d43-b975-f4579f633ce4",
|
|
"created": "2026-02-17T19:39:51.922024Z",
|
|
"modified": "2026-02-17T19:39:51.922024Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sports-mdg.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.922024Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b56960a6-7587-4424-9015-65227f3aa39b",
|
|
"created": "2026-02-17T19:39:51.922314Z",
|
|
"modified": "2026-02-17T19:39:51.922314Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--88686edf-549e-4d43-b975-f4579f633ce4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3c4dfec9-2f6e-4143-a3fc-6962d43a1c46",
|
|
"created": "2026-02-17T19:39:51.922386Z",
|
|
"modified": "2026-02-17T19:39:51.922386Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='trecvf.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.922386Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--380dd528-48ec-44f6-addb-d152369e9592",
|
|
"created": "2026-02-17T19:39:51.922924Z",
|
|
"modified": "2026-02-17T19:39:51.922924Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3c4dfec9-2f6e-4143-a3fc-6962d43a1c46",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--09f7d804-e5fa-4637-bc13-f90d10d5112f",
|
|
"created": "2026-02-17T19:39:51.923Z",
|
|
"modified": "2026-02-17T19:39:51.923Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='heaven.army']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.923Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d2d17918-ae60-4373-bcd2-7a6c84e9632c",
|
|
"created": "2026-02-17T19:39:51.923294Z",
|
|
"modified": "2026-02-17T19:39:51.923294Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--09f7d804-e5fa-4637-bc13-f90d10d5112f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fb342442-2ab3-4af2-8a61-7298cb8764da",
|
|
"created": "2026-02-17T19:39:51.92337Z",
|
|
"modified": "2026-02-17T19:39:51.92337Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mobnetlink1.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.92337Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e24cdbda-d74d-4f49-87e2-02fb149ad9f3",
|
|
"created": "2026-02-17T19:39:51.923666Z",
|
|
"modified": "2026-02-17T19:39:51.923666Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fb342442-2ab3-4af2-8a61-7298cb8764da",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cd2a4b40-7457-4043-8ec2-55005531ecba",
|
|
"created": "2026-02-17T19:39:51.923742Z",
|
|
"modified": "2026-02-17T19:39:51.923742Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vinhosadega.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.923742Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--78a696e1-d1bc-4fae-8e32-9c48554f2260",
|
|
"created": "2026-02-17T19:39:51.924038Z",
|
|
"modified": "2026-02-17T19:39:51.924038Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cd2a4b40-7457-4043-8ec2-55005531ecba",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c6e587aa-8cc7-4cdc-a188-a42f2e23946d",
|
|
"created": "2026-02-17T19:39:51.924115Z",
|
|
"modified": "2026-02-17T19:39:51.924115Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='espressonews.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.924115Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--28ca07b0-d276-4bf8-9b56-d3546723ef10",
|
|
"created": "2026-02-17T19:39:51.92441Z",
|
|
"modified": "2026-02-17T19:39:51.92441Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c6e587aa-8cc7-4cdc-a188-a42f2e23946d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cdbced39-df0b-44b6-946e-3fe6bbbdcd1a",
|
|
"created": "2026-02-17T19:39:51.924483Z",
|
|
"modified": "2026-02-17T19:39:51.924483Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='elpais.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.924483Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c9120401-ed44-49c9-aa0e-3cfe7c489803",
|
|
"created": "2026-02-17T19:39:51.924774Z",
|
|
"modified": "2026-02-17T19:39:51.924774Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cdbced39-df0b-44b6-946e-3fe6bbbdcd1a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a13c9211-1276-4ea3-a263-9dc50f830feb",
|
|
"created": "2026-02-17T19:39:51.924847Z",
|
|
"modified": "2026-02-17T19:39:51.924847Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='invoker.icu']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.924847Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--83776958-c190-4d15-9067-3b7fc147ed4c",
|
|
"created": "2026-02-17T19:39:51.925137Z",
|
|
"modified": "2026-02-17T19:39:51.925137Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a13c9211-1276-4ea3-a263-9dc50f830feb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f849b65c-6f38-4738-893f-723aefb49095",
|
|
"created": "2026-02-17T19:39:51.925209Z",
|
|
"modified": "2026-02-17T19:39:51.925209Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='omeega.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.925209Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d230743f-d4aa-41c8-9370-f2e210b673d2",
|
|
"created": "2026-02-17T19:39:51.925498Z",
|
|
"modified": "2026-02-17T19:39:51.925498Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f849b65c-6f38-4738-893f-723aefb49095",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--46413b95-5459-48d4-9d3b-058736d2a7ce",
|
|
"created": "2026-02-17T19:39:51.925571Z",
|
|
"modified": "2026-02-17T19:39:51.925571Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mywebsitevpstest.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.925571Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f60e205f-05c7-483e-b671-e314988b304c",
|
|
"created": "2026-02-17T19:39:51.925867Z",
|
|
"modified": "2026-02-17T19:39:51.925867Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--46413b95-5459-48d4-9d3b-058736d2a7ce",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cbd9eab6-120c-4385-95d3-e111991d3cf8",
|
|
"created": "2026-02-17T19:39:51.92594Z",
|
|
"modified": "2026-02-17T19:39:51.92594Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='dhll.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.92594Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5d33e478-10b1-4298-9a0f-d1e779aa3f06",
|
|
"created": "2026-02-17T19:39:51.926228Z",
|
|
"modified": "2026-02-17T19:39:51.926228Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cbd9eab6-120c-4385-95d3-e111991d3cf8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9a303776-3f09-4886-bb4c-f8ea2f88473a",
|
|
"created": "2026-02-17T19:39:51.926303Z",
|
|
"modified": "2026-02-17T19:39:51.926303Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='sephoragroup.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.926303Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1936af99-5212-4a71-a08a-72b078cd2ac5",
|
|
"created": "2026-02-17T19:39:51.926664Z",
|
|
"modified": "2026-02-17T19:39:51.926664Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9a303776-3f09-4886-bb4c-f8ea2f88473a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1064081b-84c2-45c3-958a-0b7254ddb831",
|
|
"created": "2026-02-17T19:39:51.92674Z",
|
|
"modified": "2026-02-17T19:39:51.92674Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='grupohel.social']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.92674Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--88b0434f-1201-4d38-9900-92d0c8676a67",
|
|
"created": "2026-02-17T19:39:51.927035Z",
|
|
"modified": "2026-02-17T19:39:51.927035Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1064081b-84c2-45c3-958a-0b7254ddb831",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--aaa34c98-2e19-4b3c-9039-51d82dcc1679",
|
|
"created": "2026-02-17T19:39:51.92711Z",
|
|
"modified": "2026-02-17T19:39:51.92711Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='afrinew.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.92711Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a1007073-0fd2-4f32-9a84-708ec534c699",
|
|
"created": "2026-02-17T19:39:51.9274Z",
|
|
"modified": "2026-02-17T19:39:51.9274Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--aaa34c98-2e19-4b3c-9039-51d82dcc1679",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7e8f034f-96f9-4959-943c-8e47ea1d94da",
|
|
"created": "2026-02-17T19:39:51.927476Z",
|
|
"modified": "2026-02-17T19:39:51.927476Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='uservicescheck.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.927476Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2f493c4b-c936-407c-8292-a29dbdec9bc4",
|
|
"created": "2026-02-17T19:39:51.927772Z",
|
|
"modified": "2026-02-17T19:39:51.927772Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7e8f034f-96f9-4959-943c-8e47ea1d94da",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--101dca01-24cf-4193-a4b5-2cf5d8c248b5",
|
|
"created": "2026-02-17T19:39:51.927845Z",
|
|
"modified": "2026-02-17T19:39:51.927845Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='astanapark.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.927845Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8dacd221-221b-4a41-a8e8-63c28aa86a68",
|
|
"created": "2026-02-17T19:39:51.928139Z",
|
|
"modified": "2026-02-17T19:39:51.928139Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--101dca01-24cf-4193-a4b5-2cf5d8c248b5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b4009d94-4cb9-41c9-92e0-48fc22793fc4",
|
|
"created": "2026-02-17T19:39:51.928213Z",
|
|
"modified": "2026-02-17T19:39:51.928213Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='safelyredirecting.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.928213Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fcba5d72-febf-47d9-8818-6a0df327c7fc",
|
|
"created": "2026-02-17T19:39:51.92851Z",
|
|
"modified": "2026-02-17T19:39:51.92851Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b4009d94-4cb9-41c9-92e0-48fc22793fc4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2a1cd6ab-a591-4421-b628-a273b407df7e",
|
|
"created": "2026-02-17T19:39:51.928583Z",
|
|
"modified": "2026-02-17T19:39:51.928583Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nospam.kz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.928583Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fb6834df-4aff-4b56-a40f-70484f068f98",
|
|
"created": "2026-02-17T19:39:51.928869Z",
|
|
"modified": "2026-02-17T19:39:51.928869Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2a1cd6ab-a591-4421-b628-a273b407df7e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cdbdb1c1-0f39-4464-a940-05003555a969",
|
|
"created": "2026-02-17T19:39:51.928942Z",
|
|
"modified": "2026-02-17T19:39:51.928942Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tinyulrs.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.928942Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2674887e-c7e1-47e7-b1bf-093096fe4b6f",
|
|
"created": "2026-02-17T19:39:51.929231Z",
|
|
"modified": "2026-02-17T19:39:51.929231Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cdbdb1c1-0f39-4464-a940-05003555a969",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5863336a-c603-4b30-a50a-6d7cf3a6e831",
|
|
"created": "2026-02-17T19:39:51.929305Z",
|
|
"modified": "2026-02-17T19:39:51.929305Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='weathernewz.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.929305Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--40728a93-6f29-4243-a278-739c5128a843",
|
|
"created": "2026-02-17T19:39:51.929596Z",
|
|
"modified": "2026-02-17T19:39:51.929596Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5863336a-c603-4b30-a50a-6d7cf3a6e831",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3cbb0cb5-daff-444a-8130-20b8da0aa47d",
|
|
"created": "2026-02-17T19:39:51.92967Z",
|
|
"modified": "2026-02-17T19:39:51.92967Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='zougla.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.92967Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ce19b43a-f1db-4a25-8af6-1205b69fa5bc",
|
|
"created": "2026-02-17T19:39:51.930025Z",
|
|
"modified": "2026-02-17T19:39:51.930025Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3cbb0cb5-daff-444a-8130-20b8da0aa47d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--53b7b8e0-acfe-4db7-ae9f-2be449643ba4",
|
|
"created": "2026-02-17T19:39:51.9301Z",
|
|
"modified": "2026-02-17T19:39:51.9301Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='alraeesnews.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.9301Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7082bb7a-8e01-4f25-b68b-f85edb22f7a0",
|
|
"created": "2026-02-17T19:39:51.930392Z",
|
|
"modified": "2026-02-17T19:39:51.930392Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--53b7b8e0-acfe-4db7-ae9f-2be449643ba4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--36b8c1f6-23ea-4073-915d-eff577db3ee8",
|
|
"created": "2026-02-17T19:39:51.930466Z",
|
|
"modified": "2026-02-17T19:39:51.930466Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='qwert.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.930466Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3efdd629-34e9-4399-ba7d-241ce35e38fb",
|
|
"created": "2026-02-17T19:39:51.930773Z",
|
|
"modified": "2026-02-17T19:39:51.930773Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--36b8c1f6-23ea-4073-915d-eff577db3ee8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5cc0c141-f2e5-436c-b35b-abed5ecfc9c4",
|
|
"created": "2026-02-17T19:39:51.930861Z",
|
|
"modified": "2026-02-17T19:39:51.930861Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bbcsworld.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.930861Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f5523168-b884-4ece-bb07-7aa305303785",
|
|
"created": "2026-02-17T19:39:51.931152Z",
|
|
"modified": "2026-02-17T19:39:51.931152Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5cc0c141-f2e5-436c-b35b-abed5ecfc9c4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a6801b69-13f9-41da-9b19-fd8b6d1eec01",
|
|
"created": "2026-02-17T19:39:51.931226Z",
|
|
"modified": "2026-02-17T19:39:51.931226Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='crashonline.site']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.931226Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--34bf2c1d-b51e-483d-8221-1f4c7ec53f27",
|
|
"created": "2026-02-17T19:39:51.93152Z",
|
|
"modified": "2026-02-17T19:39:51.93152Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a6801b69-13f9-41da-9b19-fd8b6d1eec01",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--591e1e05-4695-444d-889c-38be1d159390",
|
|
"created": "2026-02-17T19:39:51.931593Z",
|
|
"modified": "2026-02-17T19:39:51.931593Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='instagam.in']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.931593Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--41dcbb53-c226-4046-a58f-7a7df54203ae",
|
|
"created": "2026-02-17T19:39:51.931882Z",
|
|
"modified": "2026-02-17T19:39:51.931882Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--591e1e05-4695-444d-889c-38be1d159390",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--14670426-9607-4d24-8158-72104f2fede7",
|
|
"created": "2026-02-17T19:39:51.931956Z",
|
|
"modified": "2026-02-17T19:39:51.931956Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fireup.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.931956Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7e294d9c-67b0-45dc-99ec-3c6569974ce4",
|
|
"created": "2026-02-17T19:39:51.932243Z",
|
|
"modified": "2026-02-17T19:39:51.932243Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--14670426-9607-4d24-8158-72104f2fede7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4b84d13a-7c67-44e7-82f5-56b0fea5d31b",
|
|
"created": "2026-02-17T19:39:51.932315Z",
|
|
"modified": "2026-02-17T19:39:51.932315Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='altsantiri.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.932315Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6e901c26-4642-4e2a-8abc-4ea8c72361ce",
|
|
"created": "2026-02-17T19:39:51.932611Z",
|
|
"modified": "2026-02-17T19:39:51.932611Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4b84d13a-7c67-44e7-82f5-56b0fea5d31b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8e4bcf34-e9a7-452a-b1af-9a199e7b107d",
|
|
"created": "2026-02-17T19:39:51.932684Z",
|
|
"modified": "2026-02-17T19:39:51.932684Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='jornaldeangola.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.932684Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--28520a36-b4dc-40e2-b2ff-cc3f046a1982",
|
|
"created": "2026-02-17T19:39:51.932978Z",
|
|
"modified": "2026-02-17T19:39:51.932978Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8e4bcf34-e9a7-452a-b1af-9a199e7b107d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--161ecda2-d178-471c-aa8d-6e70c8adda0c",
|
|
"created": "2026-02-17T19:39:51.933053Z",
|
|
"modified": "2026-02-17T19:39:51.933053Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ehudaldaa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.933053Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9942ba85-dd1d-4723-bcaa-45bd834ad424",
|
|
"created": "2026-02-17T19:39:51.933405Z",
|
|
"modified": "2026-02-17T19:39:51.933405Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--161ecda2-d178-471c-aa8d-6e70c8adda0c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--43bea8c7-f4dd-4230-aa1d-840626b63526",
|
|
"created": "2026-02-17T19:39:51.93348Z",
|
|
"modified": "2026-02-17T19:39:51.93348Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gorlovski.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.93348Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e4a12c21-e711-4b96-8701-69071c795be9",
|
|
"created": "2026-02-17T19:39:51.93377Z",
|
|
"modified": "2026-02-17T19:39:51.93377Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--43bea8c7-f4dd-4230-aa1d-840626b63526",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d908e913-3e0e-4693-8e0a-ced5717df847",
|
|
"created": "2026-02-17T19:39:51.933843Z",
|
|
"modified": "2026-02-17T19:39:51.933843Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bitlinkin.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.933843Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e8b1d54f-bb3c-4786-ab54-821fab946adc",
|
|
"created": "2026-02-17T19:39:51.934132Z",
|
|
"modified": "2026-02-17T19:39:51.934132Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d908e913-3e0e-4693-8e0a-ced5717df847",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a096a4bf-eff2-4c17-910a-917389fb0996",
|
|
"created": "2026-02-17T19:39:51.934204Z",
|
|
"modified": "2026-02-17T19:39:51.934204Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='despachantonline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.934204Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--16d1ddbf-07a8-4337-a70f-65fca91a5d0b",
|
|
"created": "2026-02-17T19:39:51.934498Z",
|
|
"modified": "2026-02-17T19:39:51.934498Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a096a4bf-eff2-4c17-910a-917389fb0996",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1574000d-72ef-4392-80b9-64c70b86fc34",
|
|
"created": "2026-02-17T19:39:51.934571Z",
|
|
"modified": "2026-02-17T19:39:51.934571Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='c.betly.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.934571Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6e763c01-b238-443d-b083-0cd4b14d1279",
|
|
"created": "2026-02-17T19:39:51.93486Z",
|
|
"modified": "2026-02-17T19:39:51.93486Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1574000d-72ef-4392-80b9-64c70b86fc34",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dd2e97f2-6e44-45ad-9a4a-9649613e8314",
|
|
"created": "2026-02-17T19:39:51.934933Z",
|
|
"modified": "2026-02-17T19:39:51.934933Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='we-site.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.934933Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3da621d7-fe43-43fd-a50b-e4af2df1ddfe",
|
|
"created": "2026-02-17T19:39:51.935224Z",
|
|
"modified": "2026-02-17T19:39:51.935224Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dd2e97f2-6e44-45ad-9a4a-9649613e8314",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--347c37cd-0989-4664-a9ab-6ad1227d2955",
|
|
"created": "2026-02-17T19:39:51.9353Z",
|
|
"modified": "2026-02-17T19:39:51.9353Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='goldenscint.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.9353Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--80cacbaa-7918-45be-9d16-5e7a73102822",
|
|
"created": "2026-02-17T19:39:51.935592Z",
|
|
"modified": "2026-02-17T19:39:51.935592Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--347c37cd-0989-4664-a9ab-6ad1227d2955",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--567bdd37-6293-4c74-8ab8-3e0017b5800c",
|
|
"created": "2026-02-17T19:39:51.935666Z",
|
|
"modified": "2026-02-17T19:39:51.935666Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='xf.actor']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.935666Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e242d105-c0fa-4c7b-84d8-a81260557533",
|
|
"created": "2026-02-17T19:39:51.935951Z",
|
|
"modified": "2026-02-17T19:39:51.935951Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--567bdd37-6293-4c74-8ab8-3e0017b5800c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8c96feef-cb13-4f85-b74a-6cc1770cdbb7",
|
|
"created": "2026-02-17T19:39:51.936026Z",
|
|
"modified": "2026-02-17T19:39:51.936026Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='atheere.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.936026Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f8997e4b-22d9-4f7e-8164-3679b3c322a3",
|
|
"created": "2026-02-17T19:39:51.936314Z",
|
|
"modified": "2026-02-17T19:39:51.936314Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8c96feef-cb13-4f85-b74a-6cc1770cdbb7",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--374b612c-080b-4937-8294-d4b3c1679be4",
|
|
"created": "2026-02-17T19:39:51.936388Z",
|
|
"modified": "2026-02-17T19:39:51.936388Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='allafrika.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.936388Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a946cdf4-32ab-4824-a016-3e389c8d77c4",
|
|
"created": "2026-02-17T19:39:51.936745Z",
|
|
"modified": "2026-02-17T19:39:51.936745Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--374b612c-080b-4937-8294-d4b3c1679be4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--397c4054-f1e0-4262-bd9c-a31eaad7bd73",
|
|
"created": "2026-02-17T19:39:51.936819Z",
|
|
"modified": "2026-02-17T19:39:51.936819Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='09a.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.936819Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dca2fd01-91c2-4028-920d-85b15c3d70cd",
|
|
"created": "2026-02-17T19:39:51.937106Z",
|
|
"modified": "2026-02-17T19:39:51.937106Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--397c4054-f1e0-4262-bd9c-a31eaad7bd73",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5ffe82e2-0c67-4dac-8903-887fb74d12ca",
|
|
"created": "2026-02-17T19:39:51.937179Z",
|
|
"modified": "2026-02-17T19:39:51.937179Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='novojornal.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.937179Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--22d8e409-2826-4cb1-a505-566ff794c0a0",
|
|
"created": "2026-02-17T19:39:51.93747Z",
|
|
"modified": "2026-02-17T19:39:51.93747Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5ffe82e2-0c67-4dac-8903-887fb74d12ca",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5d6fc208-83ff-475a-9946-4bcd99558694",
|
|
"created": "2026-02-17T19:39:51.937543Z",
|
|
"modified": "2026-02-17T19:39:51.937543Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='connectivitycheck.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.937543Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--44e07d91-2aa5-4f23-b575-d2e90552b65c",
|
|
"created": "2026-02-17T19:39:51.937843Z",
|
|
"modified": "2026-02-17T19:39:51.937843Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5d6fc208-83ff-475a-9946-4bcd99558694",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--58989d4d-ad71-4f65-b6fa-0280d8425ebc",
|
|
"created": "2026-02-17T19:39:51.937917Z",
|
|
"modified": "2026-02-17T19:39:51.937917Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vinho-online.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.937917Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--49405728-e51f-4695-82a9-118ebaadb1c8",
|
|
"created": "2026-02-17T19:39:51.938213Z",
|
|
"modified": "2026-02-17T19:39:51.938213Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--58989d4d-ad71-4f65-b6fa-0280d8425ebc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5a85cd7f-855d-44b2-bf31-9b73f6cdcf57",
|
|
"created": "2026-02-17T19:39:51.938288Z",
|
|
"modified": "2026-02-17T19:39:51.938288Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fastuploads.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.938288Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dc161254-8b54-470b-a121-ac03832d8a33",
|
|
"created": "2026-02-17T19:39:51.938582Z",
|
|
"modified": "2026-02-17T19:39:51.938582Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5a85cd7f-855d-44b2-bf31-9b73f6cdcf57",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--01d90cb9-79a7-4161-be6c-6a09456ae8ef",
|
|
"created": "2026-02-17T19:39:51.938656Z",
|
|
"modified": "2026-02-17T19:39:51.938656Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='forwardeshoptt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.938656Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a3567dc1-46b2-40d1-b082-d29b6e601937",
|
|
"created": "2026-02-17T19:39:51.93895Z",
|
|
"modified": "2026-02-17T19:39:51.93895Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--01d90cb9-79a7-4161-be6c-6a09456ae8ef",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--18cb9981-5079-4c2d-b44c-51c443773306",
|
|
"created": "2026-02-17T19:39:51.939023Z",
|
|
"modified": "2026-02-17T19:39:51.939023Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='portalxa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.939023Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e1e78be9-815b-47e5-a8fb-b52c44d9e251",
|
|
"created": "2026-02-17T19:39:51.939347Z",
|
|
"modified": "2026-02-17T19:39:51.939347Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--18cb9981-5079-4c2d-b44c-51c443773306",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--94e42d57-0420-4734-871c-029097f7dfb1",
|
|
"created": "2026-02-17T19:39:51.939423Z",
|
|
"modified": "2026-02-17T19:39:51.939423Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ongs.life']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.939423Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6bbc0b91-5248-440d-a767-7b347785ccb9",
|
|
"created": "2026-02-17T19:39:51.939711Z",
|
|
"modified": "2026-02-17T19:39:51.939711Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--94e42d57-0420-4734-871c-029097f7dfb1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0435c0d9-b1de-402e-ad16-0414ca09e89d",
|
|
"created": "2026-02-17T19:39:51.939784Z",
|
|
"modified": "2026-02-17T19:39:51.939784Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='actualite.emergence-mada.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.939784Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9d2d877d-893a-478c-a9bc-57ea0aa59511",
|
|
"created": "2026-02-17T19:39:51.940154Z",
|
|
"modified": "2026-02-17T19:39:51.940154Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0435c0d9-b1de-402e-ad16-0414ca09e89d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--630af1f8-16d9-47ae-861b-06ae815d167d",
|
|
"created": "2026-02-17T19:39:51.940229Z",
|
|
"modified": "2026-02-17T19:39:51.940229Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='brkorage.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.940229Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e373cd83-5a8a-4699-bbfb-27a9c5f44fc8",
|
|
"created": "2026-02-17T19:39:51.94052Z",
|
|
"modified": "2026-02-17T19:39:51.94052Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--630af1f8-16d9-47ae-861b-06ae815d167d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77c9de89-00e2-45db-8f35-eaa470a1634b",
|
|
"created": "2026-02-17T19:39:51.940594Z",
|
|
"modified": "2026-02-17T19:39:51.940594Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='clazc.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.940594Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--54057be6-ed85-4d71-be85-5bad02531b9c",
|
|
"created": "2026-02-17T19:39:51.940882Z",
|
|
"modified": "2026-02-17T19:39:51.940882Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--77c9de89-00e2-45db-8f35-eaa470a1634b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5772c5b6-501d-46bb-81dd-129ac3bdc9a3",
|
|
"created": "2026-02-17T19:39:51.940958Z",
|
|
"modified": "2026-02-17T19:39:51.940958Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='efsyn.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.940958Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bfae271e-de6c-49cd-99e9-5a8c7447d7c8",
|
|
"created": "2026-02-17T19:39:51.941248Z",
|
|
"modified": "2026-02-17T19:39:51.941248Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5772c5b6-501d-46bb-81dd-129ac3bdc9a3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7067026e-21fe-4388-b644-5fbb74c9c94b",
|
|
"created": "2026-02-17T19:39:51.941323Z",
|
|
"modified": "2026-02-17T19:39:51.941323Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='folha9.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.941323Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4cae4dad-0aa3-4daa-b958-a18314f3b325",
|
|
"created": "2026-02-17T19:39:51.941612Z",
|
|
"modified": "2026-02-17T19:39:51.941612Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7067026e-21fe-4388-b644-5fbb74c9c94b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--887a3cf8-5869-49b9-b50d-50b626373112",
|
|
"created": "2026-02-17T19:39:51.941687Z",
|
|
"modified": "2026-02-17T19:39:51.941687Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='applepps.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.941687Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2128c54d-d174-448d-af98-a4116fc28d21",
|
|
"created": "2026-02-17T19:39:51.94198Z",
|
|
"modified": "2026-02-17T19:39:51.94198Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--887a3cf8-5869-49b9-b50d-50b626373112",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--94eb68cf-0fec-45ce-9ab3-2dc451e4f347",
|
|
"created": "2026-02-17T19:39:51.942054Z",
|
|
"modified": "2026-02-17T19:39:51.942054Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lusofonia-mundo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.942054Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b6ed3ce9-7c02-42e9-9dcf-83c3857616bc",
|
|
"created": "2026-02-17T19:39:51.942349Z",
|
|
"modified": "2026-02-17T19:39:51.942349Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--94eb68cf-0fec-45ce-9ab3-2dc451e4f347",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1a37bdf5-c103-4800-ae0d-3563414ba3b8",
|
|
"created": "2026-02-17T19:39:51.942422Z",
|
|
"modified": "2026-02-17T19:39:51.942422Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='adservices.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.942422Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8667535b-f925-44df-90fc-372c7e7aed53",
|
|
"created": "2026-02-17T19:39:51.942715Z",
|
|
"modified": "2026-02-17T19:39:51.942715Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1a37bdf5-c103-4800-ae0d-3563414ba3b8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--87d458a1-8975-4c63-96cd-ee23a1ad3ec8",
|
|
"created": "2026-02-17T19:39:51.942788Z",
|
|
"modified": "2026-02-17T19:39:51.942788Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='eventnews.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.942788Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7b2dbea6-97e4-4abd-87b4-5e0fcc968a6f",
|
|
"created": "2026-02-17T19:39:51.943078Z",
|
|
"modified": "2026-02-17T19:39:51.943078Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--87d458a1-8975-4c63-96cd-ee23a1ad3ec8",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2c7f84b8-34eb-41dc-8507-40df015f69ae",
|
|
"created": "2026-02-17T19:39:51.943151Z",
|
|
"modified": "2026-02-17T19:39:51.943151Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='viva.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.943151Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0ef0b7f7-68fd-4d3e-bf89-300c5a3260c7",
|
|
"created": "2026-02-17T19:39:51.943505Z",
|
|
"modified": "2026-02-17T19:39:51.943505Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2c7f84b8-34eb-41dc-8507-40df015f69ae",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a4f83046-2909-4b6b-889c-6ddb4aaf3a55",
|
|
"created": "2026-02-17T19:39:51.94358Z",
|
|
"modified": "2026-02-17T19:39:51.94358Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kapital-news.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.94358Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--49f46723-a0cb-437e-b9ea-0114e74dc65a",
|
|
"created": "2026-02-17T19:39:51.943877Z",
|
|
"modified": "2026-02-17T19:39:51.943877Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a4f83046-2909-4b6b-889c-6ddb4aaf3a55",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5e6a324d-ef57-41fb-a8ef-082a39950b9a",
|
|
"created": "2026-02-17T19:39:51.94395Z",
|
|
"modified": "2026-02-17T19:39:51.94395Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='escortbabesluxo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.94395Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--05614c9e-530a-40c8-b62d-dc13f8312a4e",
|
|
"created": "2026-02-17T19:39:51.944244Z",
|
|
"modified": "2026-02-17T19:39:51.944244Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5e6a324d-ef57-41fb-a8ef-082a39950b9a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--60950a8f-cc95-45c5-9509-c089b18b98f6",
|
|
"created": "2026-02-17T19:39:51.944318Z",
|
|
"modified": "2026-02-17T19:39:51.944318Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='myutbe.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.944318Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--561e7866-b06f-434a-8a39-7786a59ba9fb",
|
|
"created": "2026-02-17T19:39:51.944604Z",
|
|
"modified": "2026-02-17T19:39:51.944604Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--60950a8f-cc95-45c5-9509-c089b18b98f6",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8fe93380-718b-4b4c-9f1a-f2c6393f765c",
|
|
"created": "2026-02-17T19:39:51.944676Z",
|
|
"modified": "2026-02-17T19:39:51.944676Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='audit-pvv.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.944676Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--16be70f7-b096-464f-970e-960ca10a7db8",
|
|
"created": "2026-02-17T19:39:51.944966Z",
|
|
"modified": "2026-02-17T19:39:51.944966Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8fe93380-718b-4b4c-9f1a-f2c6393f765c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--902b3489-a3d6-428d-b27e-89e8e1439ccb",
|
|
"created": "2026-02-17T19:39:51.94504Z",
|
|
"modified": "2026-02-17T19:39:51.94504Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='adenuncia.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.94504Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--38f18224-5b40-4f0c-a965-b7695b0d391d",
|
|
"created": "2026-02-17T19:39:51.945333Z",
|
|
"modified": "2026-02-17T19:39:51.945333Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--902b3489-a3d6-428d-b27e-89e8e1439ccb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7dde1852-362f-4dc1-98de-acc7e86f2e86",
|
|
"created": "2026-02-17T19:39:51.945409Z",
|
|
"modified": "2026-02-17T19:39:51.945409Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='post-notify.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.945409Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bf536717-a643-4837-b8c4-11bbc58c99f8",
|
|
"created": "2026-02-17T19:39:51.945705Z",
|
|
"modified": "2026-02-17T19:39:51.945705Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7dde1852-362f-4dc1-98de-acc7e86f2e86",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--49f121ba-3142-45b1-aa81-9f001144fc03",
|
|
"created": "2026-02-17T19:39:51.945777Z",
|
|
"modified": "2026-02-17T19:39:51.945777Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='factosdiarios.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.945777Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e1371683-b860-4370-a284-61a8042aa62d",
|
|
"created": "2026-02-17T19:39:51.946071Z",
|
|
"modified": "2026-02-17T19:39:51.946071Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--49f121ba-3142-45b1-aa81-9f001144fc03",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dc5d794b-37e2-450b-a1d3-4774858b288e",
|
|
"created": "2026-02-17T19:39:51.946144Z",
|
|
"modified": "2026-02-17T19:39:51.946144Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='uservicesforyou.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.946144Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4497828d-4028-426e-b403-19041609f41a",
|
|
"created": "2026-02-17T19:39:51.946439Z",
|
|
"modified": "2026-02-17T19:39:51.946439Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dc5d794b-37e2-450b-a1d3-4774858b288e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0e126ba5-ea3d-4d1d-bb6c-5715272bcfcf",
|
|
"created": "2026-02-17T19:39:51.946512Z",
|
|
"modified": "2026-02-17T19:39:51.946512Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='africa-confidentiel.fr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.946512Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--44700e1a-16ef-4289-aead-f7cce20bd773",
|
|
"created": "2026-02-17T19:39:51.946873Z",
|
|
"modified": "2026-02-17T19:39:51.946873Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0e126ba5-ea3d-4d1d-bb6c-5715272bcfcf",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--5f8a7823-1244-4823-8ba9-faeca9cf1922",
|
|
"created": "2026-02-17T19:39:51.946949Z",
|
|
"modified": "2026-02-17T19:39:51.946949Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='inews.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.946949Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--22974dbd-d4cf-4feb-8bb7-82950d8c1325",
|
|
"created": "2026-02-17T19:39:51.947244Z",
|
|
"modified": "2026-02-17T19:39:51.947244Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--5f8a7823-1244-4823-8ba9-faeca9cf1922",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57585012-5b15-48fd-b33b-f0e13b3ca5db",
|
|
"created": "2026-02-17T19:39:51.94732Z",
|
|
"modified": "2026-02-17T19:39:51.94732Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bumabara.bid']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.94732Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--38414e15-e50f-4a52-815d-8ce6ab88b77f",
|
|
"created": "2026-02-17T19:39:51.947637Z",
|
|
"modified": "2026-02-17T19:39:51.947637Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--57585012-5b15-48fd-b33b-f0e13b3ca5db",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0b7f8fa8-461e-4835-b910-d4f74328df83",
|
|
"created": "2026-02-17T19:39:51.947711Z",
|
|
"modified": "2026-02-17T19:39:51.947711Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kz-news.cc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.947711Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--71237f06-b8a4-4118-b126-6a086ec77489",
|
|
"created": "2026-02-17T19:39:51.947999Z",
|
|
"modified": "2026-02-17T19:39:51.947999Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0b7f8fa8-461e-4835-b910-d4f74328df83",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--994e015e-d0dd-41ba-8831-294da1ed73be",
|
|
"created": "2026-02-17T19:39:51.948071Z",
|
|
"modified": "2026-02-17T19:39:51.948071Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='notifications-sec.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.948071Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b1f814c2-5720-4d80-855e-b43a7f71bad5",
|
|
"created": "2026-02-17T19:39:51.948368Z",
|
|
"modified": "2026-02-17T19:39:51.948368Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--994e015e-d0dd-41ba-8831-294da1ed73be",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--09aee654-93d6-430f-b9e5-761e661dbd0b",
|
|
"created": "2026-02-17T19:39:51.948441Z",
|
|
"modified": "2026-02-17T19:39:51.948441Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='universedades.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.948441Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2a3bd4d0-d10c-42c3-b319-4e97a7aa78b2",
|
|
"created": "2026-02-17T19:39:51.948735Z",
|
|
"modified": "2026-02-17T19:39:51.948735Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--09aee654-93d6-430f-b9e5-761e661dbd0b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e48dff32-7bfc-4235-bb05-4f118b1daf3f",
|
|
"created": "2026-02-17T19:39:51.948808Z",
|
|
"modified": "2026-02-17T19:39:51.948808Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='gulfweather.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.948808Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e55f255a-8302-4cf3-9572-fe0977204b78",
|
|
"created": "2026-02-17T19:39:51.949101Z",
|
|
"modified": "2026-02-17T19:39:51.949101Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e48dff32-7bfc-4235-bb05-4f118b1daf3f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7d5e586a-264e-4c0b-ab3d-bf5edf6bbe64",
|
|
"created": "2026-02-17T19:39:51.949174Z",
|
|
"modified": "2026-02-17T19:39:51.949174Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lexpressmg.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.949174Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--65e73151-701f-4c67-9b98-c1669338a2a9",
|
|
"created": "2026-02-17T19:39:51.949465Z",
|
|
"modified": "2026-02-17T19:39:51.949465Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7d5e586a-264e-4c0b-ab3d-bf5edf6bbe64",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c456faa6-0f3f-4ea9-88e2-afc3da8a2b42",
|
|
"created": "2026-02-17T19:39:51.949539Z",
|
|
"modified": "2026-02-17T19:39:51.949539Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='air-shopping.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.949539Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ea2564d3-22a9-4394-b625-b18282f91d5c",
|
|
"created": "2026-02-17T19:39:51.949833Z",
|
|
"modified": "2026-02-17T19:39:51.949833Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c456faa6-0f3f-4ea9-88e2-afc3da8a2b42",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3853bfb0-e429-4fa8-92cc-3b2c44d1f4b4",
|
|
"created": "2026-02-17T19:39:51.949907Z",
|
|
"modified": "2026-02-17T19:39:51.949907Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='svetovid.bid']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.949907Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0c48c2d5-8d7c-497c-a5c8-cf8cf5eed32d",
|
|
"created": "2026-02-17T19:39:51.95026Z",
|
|
"modified": "2026-02-17T19:39:51.95026Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3853bfb0-e429-4fa8-92cc-3b2c44d1f4b4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--efd02fd2-c8fa-4f63-a2d3-2f54c0cb082e",
|
|
"created": "2026-02-17T19:39:51.950334Z",
|
|
"modified": "2026-02-17T19:39:51.950334Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='taagangola.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.950334Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--512a16bb-17a0-44f9-bce3-457205ac7534",
|
|
"created": "2026-02-17T19:39:51.950625Z",
|
|
"modified": "2026-02-17T19:39:51.950625Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--efd02fd2-c8fa-4f63-a2d3-2f54c0cb082e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cee4aa88-4a2d-4b0b-9622-a53e2b8795d2",
|
|
"created": "2026-02-17T19:39:51.950699Z",
|
|
"modified": "2026-02-17T19:39:51.950699Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shortmee.one']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.950699Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9ba088ff-9f59-479b-b3a4-bd7bf31e3c0d",
|
|
"created": "2026-02-17T19:39:51.950988Z",
|
|
"modified": "2026-02-17T19:39:51.950988Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cee4aa88-4a2d-4b0b-9622-a53e2b8795d2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2a4275f0-3270-467c-a438-08bd11e46a79",
|
|
"created": "2026-02-17T19:39:51.951062Z",
|
|
"modified": "2026-02-17T19:39:51.951062Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='alpineai.uk']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.951062Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a827b469-85c7-4444-8cc5-8fe339636c49",
|
|
"created": "2026-02-17T19:39:51.95135Z",
|
|
"modified": "2026-02-17T19:39:51.95135Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2a4275f0-3270-467c-a438-08bd11e46a79",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--708e6ce4-e015-4c95-88bf-be910ba0cbac",
|
|
"created": "2026-02-17T19:39:51.951425Z",
|
|
"modified": "2026-02-17T19:39:51.951425Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='celebrnewz.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.951425Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1aae65bf-92b7-4309-9a4f-0181d588d5b6",
|
|
"created": "2026-02-17T19:39:51.951718Z",
|
|
"modified": "2026-02-17T19:39:51.951718Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--708e6ce4-e015-4c95-88bf-be910ba0cbac",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--42dd3f61-67f5-4cc0-8393-6f1c972f7c9e",
|
|
"created": "2026-02-17T19:39:51.951792Z",
|
|
"modified": "2026-02-17T19:39:51.951792Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='glbnews.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.951792Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--33e86877-1374-489f-b847-59b8c3018b62",
|
|
"created": "2026-02-17T19:39:51.952084Z",
|
|
"modified": "2026-02-17T19:39:51.952084Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--42dd3f61-67f5-4cc0-8393-6f1c972f7c9e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--835d70bb-3ba1-423b-ab8e-41566fba3891",
|
|
"created": "2026-02-17T19:39:51.952157Z",
|
|
"modified": "2026-02-17T19:39:51.952157Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='cloudtimesync.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.952157Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5436f9cb-7719-4aae-9ecc-c1859dd4909e",
|
|
"created": "2026-02-17T19:39:51.952451Z",
|
|
"modified": "2026-02-17T19:39:51.952451Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--835d70bb-3ba1-423b-ab8e-41566fba3891",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bcdf3915-3c87-4fa8-bb9d-d089ec743d31",
|
|
"created": "2026-02-17T19:39:51.952525Z",
|
|
"modified": "2026-02-17T19:39:51.952525Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='xnxx-hub.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.952525Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3adce7f4-232e-4211-bc9b-c346d34d34f0",
|
|
"created": "2026-02-17T19:39:51.952814Z",
|
|
"modified": "2026-02-17T19:39:51.952814Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bcdf3915-3c87-4fa8-bb9d-d089ec743d31",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--702994ff-150f-4f69-ae49-65791e98684a",
|
|
"created": "2026-02-17T19:39:51.952886Z",
|
|
"modified": "2026-02-17T19:39:51.952886Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='hellasjournal.website']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.952886Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2d2b1634-4d5e-4cd8-a158-ffcc58521007",
|
|
"created": "2026-02-17T19:39:51.953185Z",
|
|
"modified": "2026-02-17T19:39:51.953185Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--702994ff-150f-4f69-ae49-65791e98684a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2b36b19f-0958-4dd1-91a3-60a1c6c82631",
|
|
"created": "2026-02-17T19:39:51.953259Z",
|
|
"modified": "2026-02-17T19:39:51.953259Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='schedulefestival.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.953259Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8d87daaf-3919-4014-83a4-fe4fa076fa86",
|
|
"created": "2026-02-17T19:39:51.953618Z",
|
|
"modified": "2026-02-17T19:39:51.953618Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2b36b19f-0958-4dd1-91a3-60a1c6c82631",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ff78cfb1-e40c-455f-9c36-e035817a14f9",
|
|
"created": "2026-02-17T19:39:51.953695Z",
|
|
"modified": "2026-02-17T19:39:51.953695Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='thintank.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.953695Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6bab3866-3903-41e0-bc2e-8be366674753",
|
|
"created": "2026-02-17T19:39:51.953991Z",
|
|
"modified": "2026-02-17T19:39:51.953991Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ff78cfb1-e40c-455f-9c36-e035817a14f9",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e8a362c5-8ef5-41bf-92c1-e7d62b777a6c",
|
|
"created": "2026-02-17T19:39:51.954066Z",
|
|
"modified": "2026-02-17T19:39:51.954066Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wtc2222.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.954066Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--184c4001-3096-4959-a478-5fabed2024af",
|
|
"created": "2026-02-17T19:39:51.954354Z",
|
|
"modified": "2026-02-17T19:39:51.954354Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e8a362c5-8ef5-41bf-92c1-e7d62b777a6c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7f9dc514-dd16-4adb-b66e-f00df989f404",
|
|
"created": "2026-02-17T19:39:51.954428Z",
|
|
"modified": "2026-02-17T19:39:51.954428Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='networkenterprise.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.954428Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1d76de3f-8dd5-460b-8a35-bc1aff3826dd",
|
|
"created": "2026-02-17T19:39:51.954725Z",
|
|
"modified": "2026-02-17T19:39:51.954725Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7f9dc514-dd16-4adb-b66e-f00df989f404",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2223d7aa-b44b-4e0d-8a95-65802aa49fe0",
|
|
"created": "2026-02-17T19:39:51.954801Z",
|
|
"modified": "2026-02-17T19:39:51.954801Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youarefired.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.954801Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5cd0329d-1337-48ce-90a1-07986b0317b7",
|
|
"created": "2026-02-17T19:39:51.95509Z",
|
|
"modified": "2026-02-17T19:39:51.95509Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2223d7aa-b44b-4e0d-8a95-65802aa49fe0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--217ef8f1-cb6a-4f34-abdb-f947e2da0213",
|
|
"created": "2026-02-17T19:39:51.955165Z",
|
|
"modified": "2026-02-17T19:39:51.955165Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='geloraku.id']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.955165Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4fb9bd7a-ce96-4137-a4ae-81715414c845",
|
|
"created": "2026-02-17T19:39:51.955451Z",
|
|
"modified": "2026-02-17T19:39:51.955451Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--217ef8f1-cb6a-4f34-abdb-f947e2da0213",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1664db91-8d52-4ab0-a2fb-3ebb800f4cfc",
|
|
"created": "2026-02-17T19:39:51.955523Z",
|
|
"modified": "2026-02-17T19:39:51.955523Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='lylink.online']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.955523Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f29b4c00-9608-4b7e-9de2-5896570d5db5",
|
|
"created": "2026-02-17T19:39:51.955844Z",
|
|
"modified": "2026-02-17T19:39:51.955844Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1664db91-8d52-4ab0-a2fb-3ebb800f4cfc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f32e5fa2-af1a-48e1-b162-e6caf8c0609d",
|
|
"created": "2026-02-17T19:39:51.955917Z",
|
|
"modified": "2026-02-17T19:39:51.955917Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='liponals.store']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.955917Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--834dc5d0-fe8e-487a-a246-14600e6ee128",
|
|
"created": "2026-02-17T19:39:51.956209Z",
|
|
"modified": "2026-02-17T19:39:51.956209Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f32e5fa2-af1a-48e1-b162-e6caf8c0609d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c8f40796-3a30-434b-9448-2a29d94cccf4",
|
|
"created": "2026-02-17T19:39:51.956281Z",
|
|
"modified": "2026-02-17T19:39:51.956281Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='amazing.lab']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.956281Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ac28bff9-4c56-40df-acb2-d553dca66336",
|
|
"created": "2026-02-17T19:39:51.956572Z",
|
|
"modified": "2026-02-17T19:39:51.956572Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c8f40796-3a30-434b-9448-2a29d94cccf4",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--49131086-7a41-4784-8f4a-7951e1680890",
|
|
"created": "2026-02-17T19:39:51.956651Z",
|
|
"modified": "2026-02-17T19:39:51.956651Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bank-alahly.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.956651Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c896e054-3219-4cbc-8863-3a7001dce918",
|
|
"created": "2026-02-17T19:39:51.957033Z",
|
|
"modified": "2026-02-17T19:39:51.957033Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--49131086-7a41-4784-8f4a-7951e1680890",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d3de7800-678f-4c72-bdd7-48ce69eede7c",
|
|
"created": "2026-02-17T19:39:51.957116Z",
|
|
"modified": "2026-02-17T19:39:51.957116Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ulstur.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.957116Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c7d430ca-8ca0-446a-abf1-e50efc7695ee",
|
|
"created": "2026-02-17T19:39:51.957429Z",
|
|
"modified": "2026-02-17T19:39:51.957429Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d3de7800-678f-4c72-bdd7-48ce69eede7c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--c896238d-9b6e-428d-976b-cf6c72c75b6e",
|
|
"created": "2026-02-17T19:39:51.957508Z",
|
|
"modified": "2026-02-17T19:39:51.957508Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nur-news.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.957508Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--86729120-aa1e-4d11-95f3-28655ee90033",
|
|
"created": "2026-02-17T19:39:51.957816Z",
|
|
"modified": "2026-02-17T19:39:51.957816Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--c896238d-9b6e-428d-976b-cf6c72c75b6e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--43f4da78-2279-4cb4-98b0-e66f6a2a0f7a",
|
|
"created": "2026-02-17T19:39:51.957894Z",
|
|
"modified": "2026-02-17T19:39:51.957894Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='rozavetrovv.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.957894Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a104973c-ecc4-4ffd-a9d4-6cc8ed5c0694",
|
|
"created": "2026-02-17T19:39:51.958212Z",
|
|
"modified": "2026-02-17T19:39:51.958212Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--43f4da78-2279-4cb4-98b0-e66f6a2a0f7a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1a3328cb-67f2-4f55-bf12-4f5cd5dbc18b",
|
|
"created": "2026-02-17T19:39:51.958291Z",
|
|
"modified": "2026-02-17T19:39:51.958291Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='pelovkin.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.958291Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--37555468-ab72-4784-8308-6b72d3d95bd1",
|
|
"created": "2026-02-17T19:39:51.9586Z",
|
|
"modified": "2026-02-17T19:39:51.9586Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1a3328cb-67f2-4f55-bf12-4f5cd5dbc18b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1a8e938b-c147-4304-998d-cc093247749d",
|
|
"created": "2026-02-17T19:39:51.958676Z",
|
|
"modified": "2026-02-17T19:39:51.958676Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='unitei.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.958676Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--83c22357-296c-478f-9874-0d0b041cbe14",
|
|
"created": "2026-02-17T19:39:51.95898Z",
|
|
"modified": "2026-02-17T19:39:51.95898Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1a8e938b-c147-4304-998d-cc093247749d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f5583e1e-479f-4c2c-80f6-6c73f7679585",
|
|
"created": "2026-02-17T19:39:51.959057Z",
|
|
"modified": "2026-02-17T19:39:51.959057Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tinyurl.cloud']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.959057Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--defa2930-ea32-448a-8a3c-8571d4ff2d6b",
|
|
"created": "2026-02-17T19:39:51.959367Z",
|
|
"modified": "2026-02-17T19:39:51.959367Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f5583e1e-479f-4c2c-80f6-6c73f7679585",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--23679389-e763-48b6-a11b-8d281daf40fc",
|
|
"created": "2026-02-17T19:39:51.959445Z",
|
|
"modified": "2026-02-17T19:39:51.959445Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='redeitt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.959445Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e9038606-718a-499c-a124-c4588aadcc1b",
|
|
"created": "2026-02-17T19:39:51.959754Z",
|
|
"modified": "2026-02-17T19:39:51.959754Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--23679389-e763-48b6-a11b-8d281daf40fc",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--dad3acf0-266d-478b-8dba-b57c1fa1b07a",
|
|
"created": "2026-02-17T19:39:51.959831Z",
|
|
"modified": "2026-02-17T19:39:51.959831Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='culniks.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.959831Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--be5001a8-29b7-4f39-87a5-309c498edf86",
|
|
"created": "2026-02-17T19:39:51.96014Z",
|
|
"modified": "2026-02-17T19:39:51.96014Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--dad3acf0-266d-478b-8dba-b57c1fa1b07a",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--bfbd57d9-7a02-4eb6-a156-99e87e9b09ca",
|
|
"created": "2026-02-17T19:39:51.960217Z",
|
|
"modified": "2026-02-17T19:39:51.960217Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='inservices.digital']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.960217Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--af3dcb29-33cf-4501-8efc-df553a8cc0fa",
|
|
"created": "2026-02-17T19:39:51.960588Z",
|
|
"modified": "2026-02-17T19:39:51.960588Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--bfbd57d9-7a02-4eb6-a156-99e87e9b09ca",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b5008f8e-aa71-4d2c-9d65-99447bc52b26",
|
|
"created": "2026-02-17T19:39:51.960665Z",
|
|
"modified": "2026-02-17T19:39:51.960665Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bitshort.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.960665Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--37a6f2ec-f850-4153-9080-f91d839c20b0",
|
|
"created": "2026-02-17T19:39:51.960966Z",
|
|
"modified": "2026-02-17T19:39:51.960966Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b5008f8e-aa71-4d2c-9d65-99447bc52b26",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--cdf814ae-25d8-47cc-881e-28dd4649ff89",
|
|
"created": "2026-02-17T19:39:51.961041Z",
|
|
"modified": "2026-02-17T19:39:51.961041Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='synctimestamp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.961041Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--90af3686-8217-4bc3-8971-bffebb9996e8",
|
|
"created": "2026-02-17T19:39:51.961342Z",
|
|
"modified": "2026-02-17T19:39:51.961342Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--cdf814ae-25d8-47cc-881e-28dd4649ff89",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9d1ffe58-c433-4c04-80bb-1cd0f85a3452",
|
|
"created": "2026-02-17T19:39:51.961417Z",
|
|
"modified": "2026-02-17T19:39:51.961417Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='iosmnbg.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.961417Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--350c6140-7535-4cae-896b-8f4457dbed81",
|
|
"created": "2026-02-17T19:39:51.961713Z",
|
|
"modified": "2026-02-17T19:39:51.961713Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9d1ffe58-c433-4c04-80bb-1cd0f85a3452",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0ed53e94-04c3-4814-b03e-a43f6c566c88",
|
|
"created": "2026-02-17T19:39:51.961789Z",
|
|
"modified": "2026-02-17T19:39:51.961789Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='url-tiny.app']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.961789Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bba4e44c-9900-4ee1-8a0b-07a373dfcc89",
|
|
"created": "2026-02-17T19:39:51.962097Z",
|
|
"modified": "2026-02-17T19:39:51.962097Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0ed53e94-04c3-4814-b03e-a43f6c566c88",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--14643ef0-5685-4df0-8046-45241db81d72",
|
|
"created": "2026-02-17T19:39:51.962173Z",
|
|
"modified": "2026-02-17T19:39:51.962173Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mada.sahia-mijoro.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.962173Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ff6f5177-5150-42db-9c11-6c162ae3f878",
|
|
"created": "2026-02-17T19:39:51.962483Z",
|
|
"modified": "2026-02-17T19:39:51.962483Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--14643ef0-5685-4df0-8046-45241db81d72",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--4e389ffa-43ab-443d-b358-b623628c2903",
|
|
"created": "2026-02-17T19:39:51.962558Z",
|
|
"modified": "2026-02-17T19:39:51.962558Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tly.link']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.962558Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a5014b3d-8f13-4643-ac26-8837d9c94aaf",
|
|
"created": "2026-02-17T19:39:51.962844Z",
|
|
"modified": "2026-02-17T19:39:51.962844Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--4e389ffa-43ab-443d-b358-b623628c2903",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--99b650a6-8fd6-461c-be47-f4651d246c6c",
|
|
"created": "2026-02-17T19:39:51.962915Z",
|
|
"modified": "2026-02-17T19:39:51.962915Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='actumali.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.962915Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--86ea531f-96f8-4687-9185-ae1088f7c1ef",
|
|
"created": "2026-02-17T19:39:51.963203Z",
|
|
"modified": "2026-02-17T19:39:51.963203Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--99b650a6-8fd6-461c-be47-f4651d246c6c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e206fd58-860e-4648-ac1e-a9bf19b8ea89",
|
|
"created": "2026-02-17T19:39:51.963275Z",
|
|
"modified": "2026-02-17T19:39:51.963275Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='live24.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.963275Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ba838d11-65b2-4929-bfbf-ed6a14967b00",
|
|
"created": "2026-02-17T19:39:51.963567Z",
|
|
"modified": "2026-02-17T19:39:51.963567Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e206fd58-860e-4648-ac1e-a9bf19b8ea89",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--eea65e9a-fbdb-407d-8517-2d08a677ce9f",
|
|
"created": "2026-02-17T19:39:51.963642Z",
|
|
"modified": "2026-02-17T19:39:51.963642Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='nm-weather.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.963642Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cadd830a-2b28-4f71-8a76-767de928c061",
|
|
"created": "2026-02-17T19:39:51.964186Z",
|
|
"modified": "2026-02-17T19:39:51.964186Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--eea65e9a-fbdb-407d-8517-2d08a677ce9f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--ccbef81a-a893-4c68-898f-c6717ca5d993",
|
|
"created": "2026-02-17T19:39:51.964264Z",
|
|
"modified": "2026-02-17T19:39:51.964264Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='pasteposta.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.964264Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b4e7a1ed-0757-48a5-bdc9-018927eb833b",
|
|
"created": "2026-02-17T19:39:51.964579Z",
|
|
"modified": "2026-02-17T19:39:51.964579Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--ccbef81a-a893-4c68-898f-c6717ca5d993",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--491cc880-f1f4-40bd-8ad9-2f74bb6d83ee",
|
|
"created": "2026-02-17T19:39:51.964664Z",
|
|
"modified": "2026-02-17T19:39:51.964664Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bityl.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.964664Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a89941e1-e8d9-4414-9825-fc2d758f8190",
|
|
"created": "2026-02-17T19:39:51.964972Z",
|
|
"modified": "2026-02-17T19:39:51.964972Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--491cc880-f1f4-40bd-8ad9-2f74bb6d83ee",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--720ef7df-ae2c-412a-8cc1-b639700d2e5c",
|
|
"created": "2026-02-17T19:39:51.965052Z",
|
|
"modified": "2026-02-17T19:39:51.965052Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='businesnews.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.965052Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d3f51cc8-79b1-48c7-ada7-59eeb94966a6",
|
|
"created": "2026-02-17T19:39:51.965369Z",
|
|
"modified": "2026-02-17T19:39:51.965369Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--720ef7df-ae2c-412a-8cc1-b639700d2e5c",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--afdf78df-fa0e-4980-9308-c773e04ce62d",
|
|
"created": "2026-02-17T19:39:51.965449Z",
|
|
"modified": "2026-02-17T19:39:51.965449Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='onlineservices.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.965449Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--02bd267c-72dc-4887-aaa8-2b48b247ac7c",
|
|
"created": "2026-02-17T19:39:51.965768Z",
|
|
"modified": "2026-02-17T19:39:51.965768Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--afdf78df-fa0e-4980-9308-c773e04ce62d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d2635507-3607-47f3-8b9d-50299f8c0f67",
|
|
"created": "2026-02-17T19:39:51.965846Z",
|
|
"modified": "2026-02-17T19:39:51.965846Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='newsreuter.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.965846Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bc032141-f95e-46be-b6a4-b4a41439c50a",
|
|
"created": "2026-02-17T19:39:51.966155Z",
|
|
"modified": "2026-02-17T19:39:51.966155Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d2635507-3607-47f3-8b9d-50299f8c0f67",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--61e9fca1-095c-4163-a986-b368414a56ba",
|
|
"created": "2026-02-17T19:39:51.966233Z",
|
|
"modified": "2026-02-17T19:39:51.966233Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='canyouc.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.966233Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c741b8e8-00a6-428e-ac85-2762653f25fc",
|
|
"created": "2026-02-17T19:39:51.966538Z",
|
|
"modified": "2026-02-17T19:39:51.966538Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--61e9fca1-095c-4163-a986-b368414a56ba",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--0fac131e-afd8-4497-81ee-a10491eb851b",
|
|
"created": "2026-02-17T19:39:51.966615Z",
|
|
"modified": "2026-02-17T19:39:51.966615Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='kejoranews.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.966615Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--821d25af-3487-462d-88d6-d75d58ff9b9f",
|
|
"created": "2026-02-17T19:39:51.966922Z",
|
|
"modified": "2026-02-17T19:39:51.966922Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--0fac131e-afd8-4497-81ee-a10491eb851b",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--341bc131-1522-4213-8cfc-aee16efaff1f",
|
|
"created": "2026-02-17T19:39:51.966998Z",
|
|
"modified": "2026-02-17T19:39:51.966998Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtub.app']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.966998Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--93b3ef36-d715-4ed2-820c-f2f3e7de124c",
|
|
"created": "2026-02-17T19:39:51.967305Z",
|
|
"modified": "2026-02-17T19:39:51.967305Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--341bc131-1522-4213-8cfc-aee16efaff1f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--07fdd874-1106-444f-9bdc-bc531142f847",
|
|
"created": "2026-02-17T19:39:51.967383Z",
|
|
"modified": "2026-02-17T19:39:51.967383Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='liveco.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.967383Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0666ed09-d266-432d-a2b6-cf13e8f3497c",
|
|
"created": "2026-02-17T19:39:51.967696Z",
|
|
"modified": "2026-02-17T19:39:51.967696Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--07fdd874-1106-444f-9bdc-bc531142f847",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3bad8cd1-5524-4a04-b847-c0e229c42e57",
|
|
"created": "2026-02-17T19:39:51.967773Z",
|
|
"modified": "2026-02-17T19:39:51.967773Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='ladiesclubhouse.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.967773Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--02b667b0-99ae-47cc-937a-48c3c1bf3997",
|
|
"created": "2026-02-17T19:39:51.96816Z",
|
|
"modified": "2026-02-17T19:39:51.96816Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3bad8cd1-5524-4a04-b847-c0e229c42e57",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1c26bd9b-b8e3-4e55-8f88-ffe4d078c592",
|
|
"created": "2026-02-17T19:39:51.968241Z",
|
|
"modified": "2026-02-17T19:39:51.968241Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='proupload.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.968241Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--53d45a56-7dee-4334-ae20-13c1396dc7f4",
|
|
"created": "2026-02-17T19:39:51.968557Z",
|
|
"modified": "2026-02-17T19:39:51.968557Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1c26bd9b-b8e3-4e55-8f88-ffe4d078c592",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--22d1eb56-2c3d-4f5a-aa7e-06c8f5201850",
|
|
"created": "2026-02-17T19:39:51.968635Z",
|
|
"modified": "2026-02-17T19:39:51.968635Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='dragonair.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.968635Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--52912946-5c92-4811-ac99-030ea5a2f15d",
|
|
"created": "2026-02-17T19:39:51.968946Z",
|
|
"modified": "2026-02-17T19:39:51.968946Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--22d1eb56-2c3d-4f5a-aa7e-06c8f5201850",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2a38c01c-92af-4a8c-98aa-f5c1090e55a0",
|
|
"created": "2026-02-17T19:39:51.969024Z",
|
|
"modified": "2026-02-17T19:39:51.969024Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mb-ph.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.969024Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--03c07062-91d4-4fef-850e-7585960f9663",
|
|
"created": "2026-02-17T19:39:51.96933Z",
|
|
"modified": "2026-02-17T19:39:51.96933Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2a38c01c-92af-4a8c-98aa-f5c1090e55a0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3e3aec00-50d8-4150-8555-263fffe0afd3",
|
|
"created": "2026-02-17T19:39:51.969406Z",
|
|
"modified": "2026-02-17T19:39:51.969406Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shortxyz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.969406Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--917dbe28-8686-4c5e-bf9d-c8f19702ba20",
|
|
"created": "2026-02-17T19:39:51.96971Z",
|
|
"modified": "2026-02-17T19:39:51.96971Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3e3aec00-50d8-4150-8555-263fffe0afd3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--2657205c-fbe7-4ec6-ab90-cadcf58ddd57",
|
|
"created": "2026-02-17T19:39:51.969788Z",
|
|
"modified": "2026-02-17T19:39:51.969788Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='wtc3333.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.969788Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c92a3aa2-b0c6-4156-a9a6-d88a721d09fc",
|
|
"created": "2026-02-17T19:39:51.970097Z",
|
|
"modified": "2026-02-17T19:39:51.970097Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--2657205c-fbe7-4ec6-ab90-cadcf58ddd57",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fc7ed01c-0fda-4b4b-a819-2c448ee70a4f",
|
|
"created": "2026-02-17T19:39:51.970176Z",
|
|
"modified": "2026-02-17T19:39:51.970176Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='android-apps.tech']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.970176Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b91874cb-fd23-4d8e-9673-6517a8bfaf5a",
|
|
"created": "2026-02-17T19:39:51.970491Z",
|
|
"modified": "2026-02-17T19:39:51.970491Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fc7ed01c-0fda-4b4b-a819-2c448ee70a4f",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a9ce48e6-6cf1-4f94-8e21-3be482c64d03",
|
|
"created": "2026-02-17T19:39:51.970566Z",
|
|
"modified": "2026-02-17T19:39:51.970566Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='fbc8213450838f7ae251d4519c195138.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.970566Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c51b247b-b0e3-46df-ae4d-8f1dc800a0e7",
|
|
"created": "2026-02-17T19:39:51.970893Z",
|
|
"modified": "2026-02-17T19:39:51.970893Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a9ce48e6-6cf1-4f94-8e21-3be482c64d03",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--8046495c-cc9e-4d85-ab11-d106675c6b46",
|
|
"created": "2026-02-17T19:39:51.970971Z",
|
|
"modified": "2026-02-17T19:39:51.970971Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='shop-collect.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.970971Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b05e1c69-b005-4306-9fa6-b27279a42832",
|
|
"created": "2026-02-17T19:39:51.971286Z",
|
|
"modified": "2026-02-17T19:39:51.971286Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--8046495c-cc9e-4d85-ab11-d106675c6b46",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--92849523-1e2f-4cb1-b5b6-f570207e7f66",
|
|
"created": "2026-02-17T19:39:51.971363Z",
|
|
"modified": "2026-02-17T19:39:51.971363Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='bit-ly.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.971363Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ce6c04bf-a9d8-4d00-bfc5-6a32d51eeca4",
|
|
"created": "2026-02-17T19:39:51.971738Z",
|
|
"modified": "2026-02-17T19:39:51.971738Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--92849523-1e2f-4cb1-b5b6-f570207e7f66",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--6afaa055-525f-4878-bb6d-ad0858c3e388",
|
|
"created": "2026-02-17T19:39:51.971818Z",
|
|
"modified": "2026-02-17T19:39:51.971818Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='prmopromo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.971818Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d275ccff-5909-4303-8ea7-60dcdd8a139e",
|
|
"created": "2026-02-17T19:39:51.972128Z",
|
|
"modified": "2026-02-17T19:39:51.972128Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--6afaa055-525f-4878-bb6d-ad0858c3e388",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e46df7b4-d2a3-4cca-aa3f-6a4fbc24d277",
|
|
"created": "2026-02-17T19:39:51.972207Z",
|
|
"modified": "2026-02-17T19:39:51.972207Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tesla-s.shop']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.972207Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6bad85d5-4cbb-43c6-8f8d-61d83711a262",
|
|
"created": "2026-02-17T19:39:51.972554Z",
|
|
"modified": "2026-02-17T19:39:51.972554Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e46df7b4-d2a3-4cca-aa3f-6a4fbc24d277",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b325080e-60c4-4e84-96dc-d26c59ad4a51",
|
|
"created": "2026-02-17T19:39:51.97265Z",
|
|
"modified": "2026-02-17T19:39:51.97265Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='simetricode.uk']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.97265Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--350d2ab5-4892-447c-8ae9-edd831f0197b",
|
|
"created": "2026-02-17T19:39:51.972976Z",
|
|
"modified": "2026-02-17T19:39:51.972976Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b325080e-60c4-4e84-96dc-d26c59ad4a51",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fb684d2e-fafd-48f0-924b-ea221fd6c688",
|
|
"created": "2026-02-17T19:39:51.973058Z",
|
|
"modified": "2026-02-17T19:39:51.973058Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='mujimbos.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.973058Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--91c4efc4-32b9-4391-a16f-d113e854dbc5",
|
|
"created": "2026-02-17T19:39:51.973376Z",
|
|
"modified": "2026-02-17T19:39:51.973376Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fb684d2e-fafd-48f0-924b-ea221fd6c688",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--aa261092-376a-4653-9696-bca5b651f3e2",
|
|
"created": "2026-02-17T19:39:51.973455Z",
|
|
"modified": "2026-02-17T19:39:51.973455Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='soq.one']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.973455Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cbb8eb9a-f8a2-4015-9dc8-1762ed4b7a49",
|
|
"created": "2026-02-17T19:39:51.973772Z",
|
|
"modified": "2026-02-17T19:39:51.973772Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--aa261092-376a-4653-9696-bca5b651f3e2",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--29bc0886-6e92-49fc-920a-6eeda3bb4c59",
|
|
"created": "2026-02-17T19:39:51.97385Z",
|
|
"modified": "2026-02-17T19:39:51.97385Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='tupuca.co']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.97385Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5409bb08-941b-4dba-972d-a9bd566ccf76",
|
|
"created": "2026-02-17T19:39:51.974161Z",
|
|
"modified": "2026-02-17T19:39:51.974161Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--29bc0886-6e92-49fc-920a-6eeda3bb4c59",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--99ecbdc1-2fc7-4e6e-ae3c-8a44be856330",
|
|
"created": "2026-02-17T19:39:51.974242Z",
|
|
"modified": "2026-02-17T19:39:51.974242Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='suarajubi.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.974242Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ae54c213-9bce-40e3-ae5b-35b04a361ae6",
|
|
"created": "2026-02-17T19:39:51.974557Z",
|
|
"modified": "2026-02-17T19:39:51.974557Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--99ecbdc1-2fc7-4e6e-ae3c-8a44be856330",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--83b9468c-ed5c-4ccb-9c41-0e6cb101d8cd",
|
|
"created": "2026-02-17T19:39:51.97464Z",
|
|
"modified": "2026-02-17T19:39:51.97464Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='breaknews.live']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.97464Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5a5be7a6-d28c-48ff-8360-a2ed3245815b",
|
|
"created": "2026-02-17T19:39:51.974951Z",
|
|
"modified": "2026-02-17T19:39:51.974951Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--83b9468c-ed5c-4ccb-9c41-0e6cb101d8cd",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f8cd8474-e37a-4044-b3da-a71c3bc095c5",
|
|
"created": "2026-02-17T19:39:51.975028Z",
|
|
"modified": "2026-02-17T19:39:51.975028Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='landingpg.xyz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.975028Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--314635b6-b02b-4dff-9140-4a33a81a4dac",
|
|
"created": "2026-02-17T19:39:51.975417Z",
|
|
"modified": "2026-02-17T19:39:51.975417Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f8cd8474-e37a-4044-b3da-a71c3bc095c5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77be2f90-caae-4fbc-85bb-2ecc0df26aba",
|
|
"created": "2026-02-17T19:39:51.975496Z",
|
|
"modified": "2026-02-17T19:39:51.975496Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='utube.digital']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.975496Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--95fab4dd-4cb2-49f5-b214-7cd69aa56294",
|
|
"created": "2026-02-17T19:39:51.975812Z",
|
|
"modified": "2026-02-17T19:39:51.975812Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--77be2f90-caae-4fbc-85bb-2ecc0df26aba",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--43cbba18-465c-4d51-96cd-569c85d3ecf1",
|
|
"created": "2026-02-17T19:39:51.97589Z",
|
|
"modified": "2026-02-17T19:39:51.97589Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='heiiasjournai.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.97589Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b3f55b36-7006-49eb-befa-731f85b8860d",
|
|
"created": "2026-02-17T19:39:51.976207Z",
|
|
"modified": "2026-02-17T19:39:51.976207Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--43cbba18-465c-4d51-96cd-569c85d3ecf1",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--7a220972-2ab9-4f37-8a02-27b1916ddd15",
|
|
"created": "2026-02-17T19:39:51.976287Z",
|
|
"modified": "2026-02-17T19:39:51.976287Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='leefco.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.976287Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--59a92b20-e5f4-4957-83a0-c743eae88fd0",
|
|
"created": "2026-02-17T19:39:51.976592Z",
|
|
"modified": "2026-02-17T19:39:51.976592Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--7a220972-2ab9-4f37-8a02-27b1916ddd15",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fc2fa201-6c6e-45aa-b24c-0a58a81e21b5",
|
|
"created": "2026-02-17T19:39:51.976673Z",
|
|
"modified": "2026-02-17T19:39:51.976673Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='symoty.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.976673Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bdcc26f3-5ecf-4d8b-af17-2725f8fa7084",
|
|
"created": "2026-02-17T19:39:51.97698Z",
|
|
"modified": "2026-02-17T19:39:51.97698Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fc2fa201-6c6e-45aa-b24c-0a58a81e21b5",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--25de42dd-2ce8-424b-a2f5-95df62c60b43",
|
|
"created": "2026-02-17T19:39:51.977059Z",
|
|
"modified": "2026-02-17T19:39:51.977059Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='yuom7.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.977059Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1cf4910b-f593-442c-a639-24ae2f1c9ac8",
|
|
"created": "2026-02-17T19:39:51.977368Z",
|
|
"modified": "2026-02-17T19:39:51.977368Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--25de42dd-2ce8-424b-a2f5-95df62c60b43",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--046f140c-f3de-441a-adcd-d73ce0e93361",
|
|
"created": "2026-02-17T19:39:51.977446Z",
|
|
"modified": "2026-02-17T19:39:51.977446Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='youtube.voto']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.977446Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7ace9f6b-aa98-4256-83e5-e0a317274cb2",
|
|
"created": "2026-02-17T19:39:51.977753Z",
|
|
"modified": "2026-02-17T19:39:51.977753Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--046f140c-f3de-441a-adcd-d73ce0e93361",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--67086416-9b5a-436a-acce-b5d8c010e7d0",
|
|
"created": "2026-02-17T19:39:51.977831Z",
|
|
"modified": "2026-02-17T19:39:51.977831Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='efsyn.news']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.977831Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2ce33c2b-d5e9-4cb6-b74c-7811e917c3f5",
|
|
"created": "2026-02-17T19:39:51.978123Z",
|
|
"modified": "2026-02-17T19:39:51.978123Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--67086416-9b5a-436a-acce-b5d8c010e7d0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--217dfff6-6d5c-4060-9ca0-9b8acf7d73fb",
|
|
"created": "2026-02-17T19:39:51.978197Z",
|
|
"modified": "2026-02-17T19:39:51.978197Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='insider.gr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.978197Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--00766e66-3108-4b1a-812b-398f6776d179",
|
|
"created": "2026-02-17T19:39:51.978498Z",
|
|
"modified": "2026-02-17T19:39:51.978498Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--217dfff6-6d5c-4060-9ca0-9b8acf7d73fb",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1b6651e0-c739-444f-ae1c-e3d95b5713d3",
|
|
"created": "2026-02-17T19:39:51.978573Z",
|
|
"modified": "2026-02-17T19:39:51.978573Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='vestinfo.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.978573Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--592bb5b7-b11d-4b22-9c00-12fc2ede5317",
|
|
"created": "2026-02-17T19:39:51.978934Z",
|
|
"modified": "2026-02-17T19:39:51.978934Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1b6651e0-c739-444f-ae1c-e3d95b5713d3",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--e2c4ba90-9b57-4992-be76-bdd0692b2053",
|
|
"created": "2026-02-17T19:39:51.979011Z",
|
|
"modified": "2026-02-17T19:39:51.979011Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='dzhabarzan.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.979011Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--276694a9-a06c-4d71-909d-7b4be70e4748",
|
|
"created": "2026-02-17T19:39:51.979316Z",
|
|
"modified": "2026-02-17T19:39:51.979316Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--e2c4ba90-9b57-4992-be76-bdd0692b2053",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--945d5e82-6aba-461f-afee-acfea5e7b6d0",
|
|
"created": "2026-02-17T19:39:51.979392Z",
|
|
"modified": "2026-02-17T19:39:51.979392Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[domain-name:value='linkit.digital']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.979392Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d558e6dc-bb3d-4388-92a8-81b199600d90",
|
|
"created": "2026-02-17T19:39:51.979692Z",
|
|
"modified": "2026-02-17T19:39:51.979692Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--945d5e82-6aba-461f-afee-acfea5e7b6d0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1210a996-2621-4796-a41c-6859eec23699",
|
|
"created": "2026-02-17T19:39:51.97977Z",
|
|
"modified": "2026-02-17T19:39:51.97977Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/tmp/l/']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.97977Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2e22aedd-ad7c-47a4-994f-4875f42a361f",
|
|
"created": "2026-02-17T19:39:51.980445Z",
|
|
"modified": "2026-02-17T19:39:51.980445Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1210a996-2621-4796-a41c-6859eec23699",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--fa70ea8d-d2e1-4521-b865-305af3bc0b5d",
|
|
"created": "2026-02-17T19:39:51.980526Z",
|
|
"modified": "2026-02-17T19:39:51.980526Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/tmp/kusama.txt']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.980526Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fa3fd13c-82dc-425d-8431-a78043448a79",
|
|
"created": "2026-02-17T19:39:51.980833Z",
|
|
"modified": "2026-02-17T19:39:51.980833Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--fa70ea8d-d2e1-4521-b865-305af3bc0b5d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--afd2917f-d667-4503-b512-43386aa7d5ac",
|
|
"created": "2026-02-17T19:39:51.980909Z",
|
|
"modified": "2026-02-17T19:39:51.980909Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/hooker']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.980909Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7f249b43-f3ff-4072-929e-42e0986db307",
|
|
"created": "2026-02-17T19:39:51.981208Z",
|
|
"modified": "2026-02-17T19:39:51.981208Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--afd2917f-d667-4503-b512-43386aa7d5ac",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--f4ad1173-cf26-4d8f-97ad-bbddad878421",
|
|
"created": "2026-02-17T19:39:51.981283Z",
|
|
"modified": "2026-02-17T19:39:51.981283Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/data/local/tmp/wd/fs.db']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.981283Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--75d4c707-509c-46da-bada-53ae7a8bd1b9",
|
|
"created": "2026-02-17T19:39:51.981585Z",
|
|
"modified": "2026-02-17T19:39:51.981585Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--f4ad1173-cf26-4d8f-97ad-bbddad878421",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--b112e1e7-21f8-42bd-9ca7-c42d80355a22",
|
|
"created": "2026-02-17T19:39:51.98166Z",
|
|
"modified": "2026-02-17T19:39:51.98166Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/helper.sock']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.98166Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4cde356e-0448-4d37-856a-6650f1141edc",
|
|
"created": "2026-02-17T19:39:51.981974Z",
|
|
"modified": "2026-02-17T19:39:51.981974Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--b112e1e7-21f8-42bd-9ca7-c42d80355a22",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1a07f743-4436-4515-a633-17761944630d",
|
|
"created": "2026-02-17T19:39:51.982052Z",
|
|
"modified": "2026-02-17T19:39:51.982052Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/com.apple.WebKit.Networking']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.982052Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8106816c-64ee-4f75-938f-91a66418bda3",
|
|
"created": "2026-02-17T19:39:51.982494Z",
|
|
"modified": "2026-02-17T19:39:51.982494Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1a07f743-4436-4515-a633-17761944630d",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9a952fb1-fd54-43b2-a08a-4cdb07bd2114",
|
|
"created": "2026-02-17T19:39:51.982574Z",
|
|
"modified": "2026-02-17T19:39:51.982574Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/l/']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.982574Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7371ca6b-d1d7-448d-b199-b4d45023e769",
|
|
"created": "2026-02-17T19:39:51.982954Z",
|
|
"modified": "2026-02-17T19:39:51.982954Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9a952fb1-fd54-43b2-a08a-4cdb07bd2114",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--1d0e3f50-93db-4a41-a5d1-fc94b381bf29",
|
|
"created": "2026-02-17T19:39:51.983034Z",
|
|
"modified": "2026-02-17T19:39:51.983034Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/tmp/etherium.txt']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.983034Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5c18b91f-d734-4b12-b54a-3cfea0bb19da",
|
|
"created": "2026-02-17T19:39:51.983338Z",
|
|
"modified": "2026-02-17T19:39:51.983338Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--1d0e3f50-93db-4a41-a5d1-fc94b381bf29",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--47fbb4b1-b5de-4f0e-a620-c84098257c4e",
|
|
"created": "2026-02-17T19:39:51.983413Z",
|
|
"modified": "2026-02-17T19:39:51.983413Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/data/local/tmp/wd/pred.so']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.983413Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d0f84641-fc00-46d6-898b-287711525107",
|
|
"created": "2026-02-17T19:39:51.983723Z",
|
|
"modified": "2026-02-17T19:39:51.983723Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--47fbb4b1-b5de-4f0e-a620-c84098257c4e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d9ad881d-7106-40d5-90aa-449fa268a250",
|
|
"created": "2026-02-17T19:39:51.983799Z",
|
|
"modified": "2026-02-17T19:39:51.983799Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/kusama.txt']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.983799Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1ce45e18-5432-4e23-8207-275201cf6ebf",
|
|
"created": "2026-02-17T19:39:51.984112Z",
|
|
"modified": "2026-02-17T19:39:51.984112Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d9ad881d-7106-40d5-90aa-449fa268a250",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9b4a0c8e-70c8-4149-90e9-da322edbfa5e",
|
|
"created": "2026-02-17T19:39:51.984191Z",
|
|
"modified": "2026-02-17T19:39:51.984191Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/UserEventAgent']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.984191Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--618820a3-f5f9-43af-8dcf-a32d73043b79",
|
|
"created": "2026-02-17T19:39:51.984603Z",
|
|
"modified": "2026-02-17T19:39:51.984603Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9b4a0c8e-70c8-4149-90e9-da322edbfa5e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--9a37a012-e9f0-47bc-9729-2e9bed098436",
|
|
"created": "2026-02-17T19:39:51.98468Z",
|
|
"modified": "2026-02-17T19:39:51.98468Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/logs/keybagd/']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.98468Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--27d79f3e-6634-42ee-89fc-160100ca2f55",
|
|
"created": "2026-02-17T19:39:51.984991Z",
|
|
"modified": "2026-02-17T19:39:51.984991Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--9a37a012-e9f0-47bc-9729-2e9bed098436",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--77cb60e8-8351-4a72-92bb-2a9e48241b8e",
|
|
"created": "2026-02-17T19:39:51.985073Z",
|
|
"modified": "2026-02-17T19:39:51.985073Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/etherium.txt']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.985073Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7ff68a68-62d0-4a55-951c-80a682ab69aa",
|
|
"created": "2026-02-17T19:39:51.985389Z",
|
|
"modified": "2026-02-17T19:39:51.985389Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--77cb60e8-8351-4a72-92bb-2a9e48241b8e",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--d5295d56-4df3-4c9a-b779-305b10499ef0",
|
|
"created": "2026-02-17T19:39:51.985469Z",
|
|
"modified": "2026-02-17T19:39:51.985469Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/data/local/tmp/wd/']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.985469Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--55b2cdf2-7093-48e7-a6f3-5b26eee235f7",
|
|
"created": "2026-02-17T19:39:51.98578Z",
|
|
"modified": "2026-02-17T19:39:51.98578Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--d5295d56-4df3-4c9a-b779-305b10499ef0",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--3108de59-fe1e-4389-a3fb-fda940b09559",
|
|
"created": "2026-02-17T19:39:51.985859Z",
|
|
"modified": "2026-02-17T19:39:51.985859Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[file:path='/private/var/tmp/takePhoto']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.985859Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c73eadbc-b134-4f45-8a04-ff44462f55b6",
|
|
"created": "2026-02-17T19:39:51.986214Z",
|
|
"modified": "2026-02-17T19:39:51.986214Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--3108de59-fe1e-4389-a3fb-fda940b09559",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--a6bec5dc-d0d4-497d-ad2c-601e8b672219",
|
|
"created": "2026-02-17T19:39:51.986294Z",
|
|
"modified": "2026-02-17T19:39:51.986294Z",
|
|
"indicator_types": [
|
|
"malicious-activity"
|
|
],
|
|
"pattern": "[configuration-profile:id='76DAB334-7E17-475D-A5D6-0794EB5818A5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2026-02-17T19:39:51.986294Z"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8cc5641f-48de-4892-bb73-c780c0f90521",
|
|
"created": "2026-02-17T19:39:51.987147Z",
|
|
"modified": "2026-02-17T19:39:51.987147Z",
|
|
"relationship_type": "indicates",
|
|
"source_ref": "indicator--a6bec5dc-d0d4-497d-ad2c-601e8b672219",
|
|
"target_ref": "malware--d392e660-8159-4485-be85-2c021db07c5d"
|
|
}
|
|
]
|
|
} |