{"threat": {"indicator": {"description": "Simple indicator of observable {webhostwatto.work.gd}", "domain": ["webhostwatto.work.gd"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.virustotal.com/gui/domain/webhostwatto.work.gd", "https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "domain-name"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {starbucls.xyz}", "domain": ["starbucls.xyz"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "domain-name"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {crypto.hondchain.com}", "domain": ["crypto.hondchain.com"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "domain-name"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {companydeck.online}", "domain": ["companydeck.online"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "domain-name"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {docsend.linkpc.net}", "domain": ["docsend.linkpc.net"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "domain-name"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {104.168.167.88}", "ip": ["104.168.167.88"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "ipv4-addr"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {64.44.141.15}", "ip": ["64.44.141.15"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "ipv4-addr"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {jaicvc.com}", "domain": ["jaicvc.com"], "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "domain-name"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {ec8f97d5595d92ec678ffbf5ae1f60ce90e620088927f751c76935c46aa7dc41}", "file": {"hash": {"md5": ["e2699d59c3602893698c5958f485c6c2"], "sha1": ["3cc19cef767dee93588525c74fe9c1f1bf6f8007"], "sha256": ["ec8f97d5595d92ec678ffbf5ae1f60ce90e620088927f751c76935c46aa7dc41"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {4f49514ab1794177a61c50c63b93b903c46f9b914c32ebe9c96aa3cbc1f99b16}", "file": {"hash": {"md5": ["b7cb512be2f564a77608b4ffd57af9da"], "sha1": ["cd8f41b91e8f1d8625e076f0a161e46e32c62bbf"], "sha256": ["4f49514ab1794177a61c50c63b93b903c46f9b914c32ebe9c96aa3cbc1f99b16"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {de81e5246978775a45f3dbda43e2716aaa1b1c4399fe7d44f918fccecc4dd500}", "file": {"hash": {"md5": ["cdc7ae6934b904c62c942b6803ee31d6"], "sha1": ["8a1b32ab8c2a889985e530425ae00f4428c575cc"], "sha256": ["de81e5246978775a45f3dbda43e2716aaa1b1c4399fe7d44f918fccecc4dd500"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {7887638bcafd57e2896c7c16698e927ce92fd7d409aae698d33cdca3ce8d25b8}", "file": {"hash": {"md5": ["e169d95fffd8ab489f5eae02365d39ca"], "sha1": ["ed4f16b36bc47a701814b63e30d8ea7a226ca906"], "sha256": ["7887638bcafd57e2896c7c16698e927ce92fd7d409aae698d33cdca3ce8d25b8"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {fe8c0e881593cc3dfa7a66e314b12b322053c67cbc9b606d5a2c0a12f097ef69}", "file": {"hash": {"md5": ["029456110598a8fddefbf942d6f50cc4"], "sha1": ["69f24956fb75beb9b93ef974d873914500e35601"], "sha256": ["fe8c0e881593cc3dfa7a66e314b12b322053c67cbc9b606d5a2c0a12f097ef69"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {7fccc871c889a4f4c13a977fdd5f062d6de23c3ffd27e72661c986fae6370387}", "file": {"hash": {"md5": ["352715d5770b53768bf9f23d810ad55f"], "sha1": ["831dc7bc4a234907d94a889bcb60b7bedf1a1e13"], "sha256": ["7fccc871c889a4f4c13a977fdd5f062d6de23c3ffd27e72661c986fae6370387"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {9ca914b1cfa8c0ba021b9e00bda71f36cad132f27cf16bda6d937badee66c747}", "file": {"hash": {"md5": ["f90b544f89cfbe38aee18024d7c39e40"], "sha1": ["182760cbe11fa0316abfb8b7b00b63f83159f5aa"], "sha256": ["9ca914b1cfa8c0ba021b9e00bda71f36cad132f27cf16bda6d937badee66c747"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "file"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {788261d948177acfcfeb1f839053c8ee9f325bd6fb3f07637a7465acdbbef76a}", "x509": {"hash": {"md5": ["02da572d59e4aaac9341747efc00f5ae"], "sha1": ["fd24c03f07af1ec1271c40009ff648fdc0fd3ba8"], "sha256": ["788261d948177acfcfeb1f839053c8ee9f325bd6fb3f07637a7465acdbbef76a"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "x509"}}}
{"threat": {"indicator": {"description": "Simple indicator of observable {1031871a8bb920033af87078e4a418ebd30a5d06152cd3c2c257aecdf8203ce6}", "x509": {"hash": {"md5": ["16fe5b27828928b3864b11e4630c825b"], "sha1": ["bdffdab55d7857d08bb77ddeef5628c709481f15"], "sha256": ["1031871a8bb920033af87078e4a418ebd30a5d06152cd3c2c257aecdf8203ce6"]}}, "marking": {"tlp": "clear"}, "provider": "Elastic Security Labs", "reference": ["https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket"], "type": "x509"}}}