{ "type": "bundle", "id": "bundle--51eb16c3-8d4a-5298-b76d-5c2293426271", "objects": [ { "type": "malware", "spec_version": "2.1", "id": "malware--04bf6518-2d79-58a8-8d45-103870452afa", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "name": "Coruna", "description": "IOCs for the Coruna exploit kit, PLASMAGRID implant, and CryptoWaters campaign targeting iOS devices and cryptocurrency wallet apps. Attributed to UNC6353 and UNC6691.", "is_family": false }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b7b61155-7cd4-555b-b653-092280bd3091", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='0qx9g8ary2fzc5a.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec7ff538-89ea-5618-9359-8e1409ce56b3", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b7b61155-7cd4-555b-b653-092280bd3091", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b8dc9b9b-d0fb-5d24-b9d8-80d4a96955be", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='0zhlpgnh9op23uu.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8103a443-1e52-54ae-9443-211fe50acff7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b8dc9b9b-d0fb-5d24-b9d8-80d4a96955be", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--586659da-7bd2-5539-8791-b80bbe5d5dfb", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='0zsz6hq2adbfcgn.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef08ab5c-dcb3-52a7-9039-75740865b1b1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--586659da-7bd2-5539-8791-b80bbe5d5dfb", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a975f0e1-a82d-5788-8c23-4f80bba2b534", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='14sy5i89hxoqvvz.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--244f261e-2b9f-5d70-9ed3-ba7528797bb5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a975f0e1-a82d-5788-8c23-4f80bba2b534", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3b42f4c5-23d5-5c0a-a891-9dda4346a27b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='1idhfxkoylkt49i.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f7e6b18-de7c-5d12-b4fa-73f4ffba0f0a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--3b42f4c5-23d5-5c0a-a891-9dda4346a27b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6f6bcb6e-2a78-5f36-b440-c48f0d7ab8b0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='24e661zz9j4tcr7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a17aecc1-0c13-57f8-bb2d-6b7fc557ec8d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6f6bcb6e-2a78-5f36-b440-c48f0d7ab8b0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0e3effa9-694c-5978-a72b-e3fba4f25734", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='26a.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--329b301e-2d0f-5ae8-9773-4c43a6db3c60", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--0e3effa9-694c-5978-a72b-e3fba4f25734", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--642d618e-16b3-582a-b958-64a9e675da0d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='2d3zd2qa1i08756.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ccaf8938-d4e1-59e9-b92b-8461810ee7d0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--642d618e-16b3-582a-b958-64a9e675da0d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b556561d-0b33-5023-8e60-e1b2676e759f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='2hcsb7l539mxxc7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a25ffc3-cca7-5d81-949f-6fa03efc29df", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b556561d-0b33-5023-8e60-e1b2676e759f", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c95b44ca-1e01-5415-92d6-90c178e0d02a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='2i93m6puuqrmbzu.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e3cc6c9-ce73-561e-b76d-610b95945767", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c95b44ca-1e01-5415-92d6-90c178e0d02a", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--47c42972-3567-5730-ae2e-700938384cc6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='2isrlfna7sc7lf8.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--224aeff3-193a-5274-a308-f6d51ad5051e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--47c42972-3567-5730-ae2e-700938384cc6", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5be2f772-2719-5ff6-bbc5-32d0dbdba14e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='2s3b3rknfqtwwpo.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d549e16-7830-5a29-8332-6d079a509a37", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--5be2f772-2719-5ff6-bbc5-32d0dbdba14e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--29ecef0c-8ab9-563c-a11b-2996fd9c2edc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='2zaaali0ptn06q9.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2c01da4-30d7-5c50-aa08-34c21264b3a2", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--29ecef0c-8ab9-563c-a11b-2996fd9c2edc", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a729674c-1ce2-5199-a337-6930376f5061", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='3d4jp3f81m8fzh7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca0713ba-a728-596d-90a9-d0b09bdd102e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a729674c-1ce2-5199-a337-6930376f5061", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9e5b94c0-1406-539d-af4c-2a955375844f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='3urschyiqwb7y7o.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0cad550-8271-5dd8-b194-f04a5f90ff87", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--9e5b94c0-1406-539d-af4c-2a955375844f", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--970b6dfd-9985-53ab-8bd9-0d7a3eb95046", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='3v5w1km5gv.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c4fd4ef-6158-540c-a475-decf0b39b461", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--970b6dfd-9985-53ab-8bd9-0d7a3eb95046", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--53b56160-53dc-5b73-a1c7-28edfb6b8861", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='4ka4437sf5ns05x.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5afe6960-7e6b-57e9-959b-52ea4dae9568", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--53b56160-53dc-5b73-a1c7-28edfb6b8861", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--64a48156-119b-55e0-a22c-b91798aff504", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='4kgame.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c3b7a52-8131-5f61-adac-83eb6a54a385", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--64a48156-119b-55e0-a22c-b91798aff504", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e8013b05-e9d6-5293-9690-cb3391d31dfc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='4u.game']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73ec40a0-56a3-5c23-a92d-b0175385a425", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e8013b05-e9d6-5293-9690-cb3391d31dfc", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--931e1f56-f261-5cf6-b83e-4cf403c1e829", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='57asjxkgrdwkirg.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cbd6d96-fc53-5f26-ab00-67a5c2be11c4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--931e1f56-f261-5cf6-b83e-4cf403c1e829", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e697dfee-6e45-5d8c-b29c-748f3eb1013d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='5dr9adwy7i4ndkx.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d53b94b7-e609-5f09-b2cc-64ddbde2f722", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e697dfee-6e45-5d8c-b29c-748f3eb1013d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be0d09a2-92d9-582f-a218-54e34fb49066", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='5h47uppyl1wplzj.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85ff227a-dcb7-513a-81ee-b760c68529a4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--be0d09a2-92d9-582f-a218-54e34fb49066", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--087f076e-49ab-5098-be5b-08fa3f5cb189", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='642qipcdkhr8two.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32ada54b-ebc8-5562-9077-ca728f9d7806", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--087f076e-49ab-5098-be5b-08fa3f5cb189", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--725fd1a6-0df0-573e-95e1-82eb939d1321", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='668ddf.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4367c8d-e0b5-591a-9079-5070f9a09b37", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--725fd1a6-0df0-573e-95e1-82eb939d1321", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ff0835b-683b-5a65-8fff-99dd72a5bf05", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='6vmbk72t82wmbsu.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e478251f-0f8c-5212-a262-0a5564c9b160", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8ff0835b-683b-5a65-8fff-99dd72a5bf05", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7dc0fbcf-db7b-5113-9701-91e45afd9385", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='6zvjeulzaw5c0mv.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7cde2bf1-a555-515a-bc59-8396e5585799", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7dc0fbcf-db7b-5113-9701-91e45afd9385", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--51e15ac8-83cd-52e6-8c31-1dda6175de43", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='74un9sf4iaidr9j.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--072e0dcd-6044-5c60-ad4d-4fb97eb7a319", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--51e15ac8-83cd-52e6-8c31-1dda6175de43", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--220978b4-ae8c-5ee4-9db5-fd17e8672594", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='777bingos.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab88a6c4-7571-51eb-832b-955c668d8421", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--220978b4-ae8c-5ee4-9db5-fd17e8672594", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a7da5570-ac2a-55b2-a4dd-9ca33d2a5e34", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='77bingos.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62d012b6-75b2-5e8e-9ee4-7477bdbfb1be", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a7da5570-ac2a-55b2-a4dd-9ca33d2a5e34", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6fc5e84f-800a-5a3f-a158-6f277da1603d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='7ff.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02a26f40-ef74-5b50-878e-eac5bb3ea8b7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6fc5e84f-800a-5a3f-a158-6f277da1603d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6b24a2fb-cbc2-5c0f-979d-93ee7f8b0f43", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='7fun.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4392ff99-c202-5d86-be3c-a9308e551842", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6b24a2fb-cbc2-5c0f-979d-93ee7f8b0f43", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--69612cef-7f54-5530-a5ef-16d405b0a679", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='7p.game']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5c2ddc6-0b7f-57a9-aafd-6c9f461d0609", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--69612cef-7f54-5530-a5ef-16d405b0a679", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8f4a6fc3-2eda-5e96-8b05-9b279859feda", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='7uspin.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b9690d6-1035-5008-a788-b3db6ce3bfaf", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8f4a6fc3-2eda-5e96-8b05-9b279859feda", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--269e3d61-0631-51e6-93b9-c30c635a3c86", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='7w9mfrk9r6xrx6a.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bec818d7-a4e2-54a3-bf8c-ca029f38b29d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--269e3d61-0631-51e6-93b9-c30c635a3c86", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ffff396f-64f6-5d71-b0fd-3981aa30eab0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='868qhkirb5l2n0i.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a4f5a6f-358d-53e7-85a1-6ad415d5495d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ffff396f-64f6-5d71-b0fd-3981aa30eab0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--10fa489b-d316-58af-96e1-14c66f76b029", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='8ejr7ea5jx13vbp.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fafc371-9df8-549a-9f78-4d7fac1357a4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--10fa489b-d316-58af-96e1-14c66f76b029", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1e0c37c7-385f-5681-ad3a-005cc72a7c87", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='8fn4957c5g986jp.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--839a0b50-dc99-5289-ab35-7015b39afd27", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1e0c37c7-385f-5681-ad3a-005cc72a7c87", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d6e1402f-c354-54c3-b890-934d1246acd8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='8kc3bu969yz7f9t.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90356f6f-2a88-59dd-bef3-0654e5cf458e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--d6e1402f-c354-54c3-b890-934d1246acd8", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--64fc6588-622d-50e1-9a5c-779e912a0a51", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='92a3qke4at4fwmz.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92919004-2449-5ea8-8fdb-2c7cefa2a886", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--64fc6588-622d-50e1-9a5c-779e912a0a51", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dafe0e1d-0e1c-50d0-99b6-2c6b687ab521", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='98a.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1de1199b-4bf9-52b4-b0ad-77103569a2bf", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--dafe0e1d-0e1c-50d0-99b6-2c6b687ab521", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0d7bc8a3-3376-5fac-86ac-2b877c044134", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='9hl73l96udxp8dz.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a41ec533-b990-5408-9e5d-a238e5fa920e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--0d7bc8a3-3376-5fac-86ac-2b877c044134", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ee0f56f3-c1ad-5139-9ae1-c1f90062e7b0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='a1ku2qvyyo09c9l.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c214462f-9526-5756-9353-d053794b5516", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ee0f56f3-c1ad-5139-9ae1-c1f90062e7b0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dc91b277-f4b9-5e1f-b935-99405890d54e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='abw3wzr59io82se.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96711422-ca42-5dc9-b5fd-ad571c9d7dbe", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--dc91b277-f4b9-5e1f-b935-99405890d54e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--962860c9-c03d-530a-99d7-047141e11369", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ai-scorepredict.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86d7fbf5-42eb-5b75-ba3c-0313781168c2", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--962860c9-c03d-530a-99d7-047141e11369", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--af1d6b7b-a587-5fba-8417-a101c0808651", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='aidm8it5hf1jmtj.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d635c956-62dc-54ee-966b-eecdec0d229e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--af1d6b7b-a587-5fba-8417-a101c0808651", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--89ec5b91-c0cc-582a-a444-9195f161a8f3", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='alnjjsdbsgzza7y.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb56016b-a080-5131-ac29-4ab1a8d680e6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--89ec5b91-c0cc-582a-a444-9195f161a8f3", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e61eabd6-b70f-5dda-8e59-98883e6116e8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='amewkw0nfd11qpr.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a68b6ca-3ccb-5271-a0a2-b5baf11e9bb8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e61eabd6-b70f-5dda-8e59-98883e6116e8", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2d58b398-ea20-5d74-a0e7-c6654326fd26", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='appstoreconn.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b25569e5-0fd7-5562-950f-ce471dc4965b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--2d58b398-ea20-5d74-a0e7-c6654326fd26", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1c0cfbdd-bd0c-5c96-8731-9d0581160b20", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ar2ojsx340jksmg.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2985457e-438d-5ed2-80d8-40797b1f2805", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1c0cfbdd-bd0c-5c96-8731-9d0581160b20", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--250ab50a-6999-516f-8237-fdc8e9c81aca", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='are7nuagy9a68uf.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f51aa0e-4f05-53a3-90e8-682a2fc5d0b6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--250ab50a-6999-516f-8237-fdc8e9c81aca", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--76501075-cc75-54d6-ae90-65e98a6f2c58", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='as75qetdi25wvgu.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe7882d6-5d67-5899-b554-b0d18fc3bb66", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--76501075-cc75-54d6-ae90-65e98a6f2c58", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4d9f9aa6-6498-523f-8511-61a608bed96b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='axs7x0ad629ggpf.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5322cf20-0940-5a4b-8428-92612d5684c3", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--4d9f9aa6-6498-523f-8511-61a608bed96b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--446b454b-68c2-5de2-a127-b89136001fe6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='b27.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b09d0f65-7c43-53cf-8ef2-8389b570ee5f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--446b454b-68c2-5de2-a127-b89136001fe6", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--29056ebe-b1da-59d6-acc2-c091e59b647d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='b38w09ecdejfqsf.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afec547b-915f-5344-906b-495792f5ae97", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--29056ebe-b1da-59d6-acc2-c091e59b647d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c73f73d0-234b-58ae-b738-428dafb4efc6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='b96r89p5bnuwbc7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a420b377-658d-5f93-be6e-990cab917de7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c73f73d0-234b-58ae-b738-428dafb4efc6", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c55e9bb2-0da5-560e-b3ea-fad82fb65b99", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='bestcryptocurrency.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b858346-beed-5195-8817-fdf36218f386", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c55e9bb2-0da5-560e-b3ea-fad82fb65b99", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5e02e000-4389-595c-9911-800f81b214dc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='bh6jnmi21q2qs7n.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2374181e-f860-5dff-8ec3-d5325417b41f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--5e02e000-4389-595c-9911-800f81b214dc", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6663d63c-4815-576f-862c-44c783ec5888", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='binancealliancesintro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b4c315b7-c643-5ba7-bd04-c9809486f93d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6663d63c-4815-576f-862c-44c783ec5888", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--afa5014a-f6a4-5a33-b84e-7bc650013cf1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='bingo777.now']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3332b1ed-c7b7-5552-aa20-9b4557b957d1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--afa5014a-f6a4-5a33-b84e-7bc650013cf1", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--64c22357-a0e7-5352-9006-d71cc8645396", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='btrank.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98e8c4e5-b5b4-5b63-9372-1ce00ab50512", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--64c22357-a0e7-5352-9006-d71cc8645396", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e6f5ae4a-285c-5527-ae37-13e4d11d845b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='c5t8kptatr57n7y.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3e9db09-100b-5350-b848-f28b748f1af0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e6f5ae4a-285c-5527-ae37-13e4d11d845b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8aebed4c-c925-5a9c-99f6-d541b5fed07d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cc0mvv7661lymjb.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0aadd130-d98b-53de-b02c-226133843d55", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8aebed4c-c925-5a9c-99f6-d541b5fed07d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--486269c5-cad6-5f37-8b76-cc3ed8cea7f0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ccpqqe9rtz00s24.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93224bc6-b90d-5037-b667-dfa321b69a87", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--486269c5-cad6-5f37-8b76-cc3ed8cea7f0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f183c377-0192-5a99-b41a-ef744d87a910", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cd6s6960b29iuzo.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bff496ac-f405-5421-b916-04344acf9f06", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f183c377-0192-5a99-b41a-ef744d87a910", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e5cb6bd7-b837-582e-8224-0f61e5c25abc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cdn.uacounter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa3bc8b7-11e6-52cd-8323-a1b9ea15a750", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e5cb6bd7-b837-582e-8224-0f61e5c25abc", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f505c1c5-ee81-5deb-87fb-e8b13e903648", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cphrz39s5qm4t1y.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bed6d700-acea-5881-83e2-b7d1a984ef56", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f505c1c5-ee81-5deb-87fb-e8b13e903648", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cd75512e-760f-502f-bca8-bcd78bc98ac1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cryptocurrencyworld.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21dae05b-3a91-5889-9099-7c0ac164052c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--cd75512e-760f-502f-bca8-bcd78bc98ac1", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--337832c7-aab2-5e02-94a4-55872257357b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cwt92c4w1u0f70s.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a42da07-df65-5704-8a3c-2ff44d3317a9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--337832c7-aab2-5e02-94a4-55872257357b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--182f491c-93d4-5df9-a179-bf73dc3fbef5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='cy8.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7d634c1-94c1-5ee6-be31-e002f0ee373b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--182f491c-93d4-5df9-a179-bf73dc3fbef5", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--48bb41c6-3731-5e0f-a593-25209e0615d4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='dbgopaxl.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--522e15a1-adbb-5147-b234-a98d9b52f13d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--48bb41c6-3731-5e0f-a593-25209e0615d4", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--10d2814b-920d-5b1a-80bd-d3f00bc8c8c8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='dd9l7e6ghme8pbk.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d661991-c9ab-5d51-82b6-0e9a94ed6032", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--10d2814b-920d-5b1a-80bd-d3f00bc8c8c8", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0206bded-7966-5326-a6e2-cc3f4e1b39e0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ddus17.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17830b4b-4c8e-55be-9498-fca53873a171", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--0206bded-7966-5326-a6e2-cc3f4e1b39e0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9a4a4379-6999-5c88-bac6-8fa8c00fd7c6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='dkuu0e7n5jsyakv.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e7d670c-c398-5afa-a27d-420eb702d144", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--9a4a4379-6999-5c88-bac6-8fa8c00fd7c6", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--27c83445-9762-5787-b275-7b88177f1430", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='dud1otgja7rnwan.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7a52d8a-8625-519d-997c-d0965b103f9f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--27c83445-9762-5787-b275-7b88177f1430", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--35c4df00-4253-5020-ac8c-494d9c618c85", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='dv51kcinorhi2aj.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ef0fd5c-70f3-5f0b-9406-42d3c2ebc671", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--35c4df00-4253-5020-ac8c-494d9c618c85", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6301e47f-26b9-5cf6-ae16-09dd18fb1ee1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='e00l4axt0yf7m2k.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9603244-c113-5d03-82d9-3ce2c330b6f4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6301e47f-26b9-5cf6-ae16-09dd18fb1ee1", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3a29d5bf-7e8c-5ed9-8171-95a45ff28d3a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='eebiov4uh9lk8i4.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45e9ef42-00a5-58e7-ac0e-ed0c533a295f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--3a29d5bf-7e8c-5ed9-8171-95a45ff28d3a", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--25d57fd3-6a9f-5f5c-92bb-4bddf6ebb27f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='eg2bjo5x5r8yjb5.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ad5a839-422c-54b4-9c64-89863f5304a0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--25d57fd3-6a9f-5f5c-92bb-4bddf6ebb27f", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--de0f62e7-3907-5835-aff3-2987beec50eb", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='erjthj4k3aqz04x.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6fa92f1-057c-5012-8274-86778b8434c1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--de0f62e7-3907-5835-aff3-2987beec50eb", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b2745031-1f90-5c62-8d07-28b7189214ad", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ewllhwxz16atjlx.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a88d084-e74a-54c1-b6a1-1a96807b03c8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b2745031-1f90-5c62-8d07-28b7189214ad", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--00b4d428-73f9-5b34-9c3e-16e19c5e6869", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='f0qxj4brxkcwtar.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42229218-7715-577a-8805-91c326a9d7f8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--00b4d428-73f9-5b34-9c3e-16e19c5e6869", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--592870f7-cc52-5524-ba70-010f3203b0d7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fbn98qo7hk35w0t.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4284bf08-0c7b-5cc4-89f8-1dc99ee28295", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--592870f7-cc52-5524-ba70-010f3203b0d7", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3450bcb3-945f-5f3e-ac1d-fd21831ed6c5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fdiw0xw1o9r6zk3.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3312be8-ae96-57ae-a62a-dc0e9ddffd47", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--3450bcb3-945f-5f3e-ac1d-fd21831ed6c5", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--40b33642-5d52-55db-b531-d6c5f3f6c68b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fgr1w2gnsdvsb.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b65fe8fe-a4f2-5383-b483-db34e5fea4e6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--40b33642-5d52-55db-b531-d6c5f3f6c68b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8b4f592b-4802-5346-85e3-aa4176c7364d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fs7ag8pics8ra9n.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2254badc-b62c-5582-9258-331f05a6a587", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8b4f592b-4802-5346-85e3-aa4176c7364d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--690cfbec-a8b4-5621-87b2-be06ef615fb5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fxp34lig1xtahno.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--936d6c22-3519-5180-821f-54869e3d2ec0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--690cfbec-a8b4-5621-87b2-be06ef615fb5", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b5642eed-20a8-5b84-9730-8ddb9d964bd1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fxrhcnfwxes90q.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3dd3c02a-05e6-56b6-9bd0-f7040845bb2b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b5642eed-20a8-5b84-9730-8ddb9d964bd1", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57bf2989-9c07-5184-8785-224e683c710f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='fzz81wv0c5l60j6.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d92a63a2-9377-5476-93e5-6c088a73b4ed", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--57bf2989-9c07-5184-8785-224e683c710f", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9f6cec7d-2bf0-505c-8a71-2e18dcedb82b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='g18uw6zaiqeprj1.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--373e8c4d-5efb-5239-8c80-319dea377627", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--9f6cec7d-2bf0-505c-8a71-2e18dcedb82b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0e76d057-5f4e-5764-a880-89e2f7a1c5ac", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='gafa4z8n22l5z2d.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e602f7b1-d955-5339-ac76-f31d569cb5b9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--0e76d057-5f4e-5764-a880-89e2f7a1c5ac", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fd782a91-8f6d-5b12-825c-5f93d8a93e43", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='gdvynopz3pa0tik.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--397e6f4f-d3b9-5ab4-a9e3-8ca77c9cc7e0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--fd782a91-8f6d-5b12-825c-5f93d8a93e43", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--82eaf4fd-6005-5de5-882e-65b30c425132", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='goanalytics.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a57e3b98-3050-524f-9e41-b5fdfbb237a4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--82eaf4fd-6005-5de5-882e-65b30c425132", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6482bc49-563b-58e8-a6fd-f82176c7ace3", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='goodcryptocurrency.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b44f748-0e58-5203-80f8-43bd98756c6d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6482bc49-563b-58e8-a6fd-f82176c7ace3", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--54e03cba-4bd6-5bb5-a032-36481dd62340", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='gqjs3ra34lyuvzb.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36623ff9-e921-54fe-8bf3-e5c825a21c8e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--54e03cba-4bd6-5bb5-a032-36481dd62340", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f9c734c-0fef-5962-87c6-af2098a904d6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='h1yvb0pd9gl9422.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56644f25-412d-5ef9-9ae8-b655ed15d32e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7f9c734c-0fef-5962-87c6-af2098a904d6", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--915ec9e1-d493-5dcf-9547-c6175e33b789", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='h4k.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b011989e-b692-5636-877f-668df0d56ef3", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--915ec9e1-d493-5dcf-9547-c6175e33b789", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7aba30b2-4028-530f-9b4e-a66d648639ab", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='hegjjypf3lzc3qn.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa725cab-7568-5a2f-bf7b-3d2bcc9696b8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7aba30b2-4028-530f-9b4e-a66d648639ab", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be60c2b5-d458-5433-abdf-2ee03fed79d2", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='hfteigt3kt0sf3z.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d31d56c2-6e05-56e1-b8df-440c26a36afd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--be60c2b5-d458-5433-abdf-2ee03fed79d2", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6f985f73-5485-501a-93ea-25e8f1ab6141", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='hmpfdh7p8n6i5zr.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7203e6c9-2075-58e8-ad19-2c5bc42c169c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6f985f73-5485-501a-93ea-25e8f1ab6141", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b37351cb-8fd7-57c4-86bc-9f2f3c155388", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='hui4tbh9uv9x4yi.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7e9aa67-225e-56ed-9626-f3e1b1c3eaf7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b37351cb-8fd7-57c4-86bc-9f2f3c155388", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ee0711c8-7cc7-5d59-a94f-d55c23c09d32", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='i.binaner.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5d8caeb-8d86-5485-a288-0ab2708d4c81", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ee0711c8-7cc7-5d59-a94f-d55c23c09d32", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1ad4ada8-22f1-5a39-8ece-bc7c25705145", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ibrzwbxsn6rgyai.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc8570ac-bc0c-559a-879f-1a2bacced91b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1ad4ada8-22f1-5a39-8ece-bc7c25705145", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ab5dcfd5-a9f5-552d-93a9-9f5a40ebe2f7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ios.teegrom.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--676713ca-92fa-502d-8381-5967514e2a48", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ab5dcfd5-a9f5-552d-93a9-9f5a40ebe2f7", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e3d40f9c-41cd-5306-b1e1-7fd76ddb8e2d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='it7cp49qehrj85j.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eeeeee01-b324-5e45-981d-916954a2373e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e3d40f9c-41cd-5306-b1e1-7fd76ddb8e2d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--83642d5f-c749-5733-995b-d89404cea4c3", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='jw732utrrcvqwbp.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce2ea826-9086-59aa-98a7-ad906a8d3be9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--83642d5f-c749-5733-995b-d89404cea4c3", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--82d8551a-7ac9-5e52-a767-e3d93ea706af", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='k88q386znxmk4f3.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55fb804b-a6db-55f8-a238-6f345e353ae1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--82d8551a-7ac9-5e52-a767-e3d93ea706af", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d0b0e598-d55d-583d-9caa-80755013c90e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='k96.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56806b19-3ad9-5c5f-9974-b428397f1f4a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--d0b0e598-d55d-583d-9caa-80755013c90e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2af61303-1d96-5036-b1c9-e09617532806", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='kanav.blog']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--258335e0-b94b-5b04-9888-ca0c89e1eef0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--2af61303-1d96-5036-b1c9-e09617532806", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f0bd1aeb-fdae-5c55-9d82-377cde52a565", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='kyaadeow5dldqu9.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b9082fa-afc5-529c-a7d8-c11e436ffda6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f0bd1aeb-fdae-5c55-9d82-377cde52a565", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f18cf98-a21c-5090-8e65-44fcead4d57a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='l7coq3s7mosgetz.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13de3435-f3b7-54d4-9a74-b4499fe13bc5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7f18cf98-a21c-5090-8e65-44fcead4d57a", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e3127189-888d-5c27-b731-0f5659177d1c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='lddx3z2d72aa8i6.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--453a31aa-dfc5-5d0b-ba79-4f865a0bdbb6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e3127189-888d-5c27-b731-0f5659177d1c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--38535f9c-e8ec-56bb-80b4-ccd257ad2c1a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='liquorfight.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57361c38-aa7f-51d9-8b25-690b1586db77", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--38535f9c-e8ec-56bb-80b4-ccd257ad2c1a", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d0003a2e-e7af-564d-86d4-92145b19d5b0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='lk4x6x2ejxaw2br.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9788caf-f448-58eb-8981-8cc7a846ebbb", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--d0003a2e-e7af-564d-86d4-92145b19d5b0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1d2db19-1e30-5866-be8e-a74b75f106c2", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='lsnngjyu9x6vcg0.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6aab8179-b88d-5bb6-ace8-843b335a20ed", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f1d2db19-1e30-5866-be8e-a74b75f106c2", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--16dbc1d4-3f2a-5b8a-8b21-f1b284dfd508", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='m.pc6.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b24077a-e596-5e6b-b87c-93f6e5e01b29", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--16dbc1d4-3f2a-5b8a-8b21-f1b284dfd508", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fa2f64a6-479f-5751-bdea-f134698382bd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='m5pfh9jwsj090e8.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7af09a9-626e-50c1-966c-de0adaae38f9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--fa2f64a6-479f-5751-bdea-f134698382bd", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bb098a81-3c97-5801-b13c-d49502b1fb6e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='medobv5dkjl2bm0.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9a0c56f-f9cb-56f1-9f07-ca8139ca50b0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--bb098a81-3c97-5801-b13c-d49502b1fb6e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--96d6189c-6f5b-512b-b3f8-0fe7cc510d06", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='mjdqw.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d250f4e-a307-5899-b167-b955ce7f5e17", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--96d6189c-6f5b-512b-b3f8-0fe7cc510d06", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a3ef08ef-0a18-5c94-95a7-8cbf55ea7ab2", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='mkkku.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba2a9670-2889-5a70-ae63-d19ba53359f4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a3ef08ef-0a18-5c94-95a7-8cbf55ea7ab2", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--deac5ebb-ed08-5dce-937a-ef8e4dcba0ec", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='mvqpy8leaale0tx.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95d7e8f2-8305-5f2c-b93c-a1bad94ab16d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--deac5ebb-ed08-5dce-937a-ef8e4dcba0ec", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c3a7dbc1-7e5c-50f4-b880-18f9cc7590a8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='mxbc-v2.tjbjdod.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f9243cf-74cf-5274-bd94-a64e331fdddf", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c3a7dbc1-7e5c-50f4-b880-18f9cc7590a8", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--56c5252f-ce37-5dc0-a469-9808a60fb04c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='n49.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86388272-9c3f-5aba-a8da-8d829d6c15c4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--56c5252f-ce37-5dc0-a469-9808a60fb04c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2a8cf6b0-3692-5ebb-a26c-ab54a8272044", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='n9cfcqvl0ihcn3a.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c055e9c-ebc2-5318-abb0-bad621ca309d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--2a8cf6b0-3692-5ebb-a26c-ab54a8272044", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--de641b69-dec3-5f14-9bef-aa7ea5656c00", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='nk3kuxai4q3hn7k.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9b19c46-1ead-5019-a7b9-e96605abc4d9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--de641b69-dec3-5f14-9bef-aa7ea5656c00", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--938112a7-8caa-55ba-8608-f6a42ff21a59", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='noasu0d4szv6e0a.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cb39568-173f-5542-be5d-aa4fc563c73d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--938112a7-8caa-55ba-8608-f6a42ff21a59", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e093f076-1e85-51b1-938f-3d5a5a9750fb", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='nr48mjgvgcjgklc.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcc98670-c9ab-5f97-8a00-f138abfa47c9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e093f076-1e85-51b1-938f-3d5a5a9750fb", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--277a43d7-750f-5e9f-8e16-48f0a12df940", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='o08h5rhu2lu1x0q.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8b13954b-c337-5ea8-8601-8869e8981636", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--277a43d7-750f-5e9f-8e16-48f0a12df940", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--63694325-4233-567f-9a3a-3b509480fd5b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ol67el6pxg03ad7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29667837-d10c-5a3e-85a4-1bbfcafa7da7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--63694325-4233-567f-9a3a-3b509480fd5b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--069bb206-b472-5bf5-959e-24d4063b7b35", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='oljxbg4phuv51ql.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48894cce-ddd5-510e-b8b5-9398fef5777a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--069bb206-b472-5bf5-959e-24d4063b7b35", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--43e2c7e8-4d02-5414-89f1-b7cca9292c89", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='oqb2oaq7d1vtb4s.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d38d02ac-0086-5da9-845a-050fb9b19daf", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--43e2c7e8-4d02-5414-89f1-b7cca9292c89", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--87fe1cd3-1c64-5b3d-b3f3-d54da9e7e99e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='pbp5j308edop478.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64a9aa4a-8a20-5e4f-8db4-7fd68c7fb8af", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--87fe1cd3-1c64-5b3d-b3f3-d54da9e7e99e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8e65dc27-6e52-55f3-b722-3eade6593d93", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='pdzrz46tdskodhj.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d9b11b8-cc50-56b1-9887-f4f387d7a711", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8e65dc27-6e52-55f3-b722-3eade6593d93", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5703a1d5-623e-53a0-aa22-20c83df66f2c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='pen0axt0u476duw.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96cf27cf-ab5d-584e-8dcc-578be2963dac", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--5703a1d5-623e-53a0-aa22-20c83df66f2c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e2462691-19b5-58ae-848d-f882faeacd58", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='pepeairdrop01.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--907d776c-9f3f-5bd2-ae57-9fc56bd31f7c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e2462691-19b5-58ae-848d-f882faeacd58", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ec907a54-4532-5127-90a5-974e2145d236", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='pflfkewv5g23mag.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e9cc031-3811-5eb8-9f97-c133a3c53c0f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ec907a54-4532-5127-90a5-974e2145d236", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d45b1430-3038-5df0-9fbc-62422cc10068", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='q25b6rps0y8qe2f.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--77b6871c-7314-5e9f-896a-26b7d4726bbc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--d45b1430-3038-5df0-9fbc-62422cc10068", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9c5b0344-4a3e-55e5-950c-e997c8bb3e18", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='qkcun3zog9k03gm.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab9f018f-547c-5d98-872f-9a3c82fc2dc6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--9c5b0344-4a3e-55e5-950c-e997c8bb3e18", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--970d4c3c-61e5-59cc-87c9-168dcd0edb77", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='rlau616jc7a7f7i.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afd92d78-7863-5784-afeb-ab0d877df077", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--970d4c3c-61e5-59cc-87c9-168dcd0edb77", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7740b561-872d-5e62-b715-4d1f5560a477", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='roy2tlop2u.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6e0a790-b143-5dea-b46b-7d1e87cc1ca5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7740b561-872d-5e62-b715-4d1f5560a477", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6b9befad-4a88-5004-94d2-8f537546ca04", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='s6a7faijhiddeb8.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88a6f104-70c3-58d8-9b2e-5dd28c0569d4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6b9befad-4a88-5004-94d2-8f537546ca04", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--02592294-8b7a-505d-bc92-ec4760e54973", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='seven7.to']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d90d673-a98c-5bba-925e-3116fc318f57", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--02592294-8b7a-505d-bc92-ec4760e54973", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eb9cd09e-3ed3-5c84-a4c7-d6bbf6574100", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='seven7.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1941a7d1-ad98-570b-8921-4eca2ca72a3c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--eb9cd09e-3ed3-5c84-a4c7-d6bbf6574100", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a43d216c-5b56-516d-a2ee-6a1d0b8ad461", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='sf2bisx5nhdkygn3l.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e8c23c0-3d48-5757-8bbc-05365fe52910", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a43d216c-5b56-516d-a2ee-6a1d0b8ad461", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--90757e69-69ce-5f4a-b162-b5bba848c814", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='shnqt4e97bc17l6.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65dca541-4ea4-5011-9d9f-ea025c188441", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--90757e69-69ce-5f4a-b162-b5bba848c814", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b3a1e3bb-5909-5802-b04b-4fa1885e3d26", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='sj9ioz3a7y89cy7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a81a8340-bc42-54f7-bd66-76112515c58f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b3a1e3bb-5909-5802-b04b-4fa1885e3d26", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3a1cf088-4d08-5f1d-bcea-1c104638ddaa", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='sm8qpfmv0ldodpj.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e3c73cc-d63d-5efc-a6df-fb21257a0abd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--3a1cf088-4d08-5f1d-bcea-1c104638ddaa", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--10d409d8-77c8-5ff0-ae8c-59557c6798d5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='snrysedijwbkwin.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c600029-3090-58eb-81a9-ea9fc9c722b9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--10d409d8-77c8-5ff0-ae8c-59557c6798d5", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3c417c60-e45a-59f9-939e-a263f35310ee", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='spin7.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a85314b3-3dac-545f-bb56-6f1baa4a7b6f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--3c417c60-e45a-59f9-939e-a263f35310ee", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cff0e089-714d-5bc2-a641-b8b4c9adddb7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='t7c.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35b92557-fcdf-5c71-ae5b-c62c871ba8d1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--cff0e089-714d-5bc2-a641-b8b4c9adddb7", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f9b517d7-3d9f-5766-bb3c-925b4b82efcf", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='tcqk4shuq6vosa2.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b20c6230-fdcf-51e9-9fe6-438de20d3cd0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f9b517d7-3d9f-5766-bb3c-925b4b82efcf", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0b68a926-0d9e-50fc-877f-5bc00fc59662", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='tubeluck.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8820cc07-7855-5e58-8110-618199f78e51", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--0b68a926-0d9e-50fc-877f-5bc00fc59662", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4e39567d-8dc5-5318-8ee5-8dd93e83e87b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='uawwydy3qas6ykv.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41bfb3b5-a13e-5284-9dba-a35c40ee71c4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--4e39567d-8dc5-5318-8ee5-8dd93e83e87b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--160fda3e-0b1e-5de6-8419-95cfcf7b843e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ufli5en5arh9c7b.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f65fdb70-f68d-56af-976a-2456d407d223", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--160fda3e-0b1e-5de6-8419-95cfcf7b843e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--12fbfc4b-886f-5925-96fc-920988b9a3f8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='uylbh9ab07zs0nr.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--801f4b8b-44e2-59a3-8d03-5f919c83912b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--12fbfc4b-886f-5925-96fc-920988b9a3f8", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c6c015bc-c4a6-5671-8e55-0562ead5393b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='v2gmupm7o4zihc3.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49306c14-4de3-58d4-a333-1e13963193af", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c6c015bc-c4a6-5671-8e55-0562ead5393b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--575991a6-131b-5ea9-beca-c411489773f0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='vizpwtdjlluhucu.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4f2e175-1d99-5586-847b-a393788f70cd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--575991a6-131b-5ea9-beca-c411489773f0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--21f7a2d5-b319-5539-972a-7c3be72d6568", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='vu28ylznt0izc3w.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c576de3f-2ea3-54d1-8c38-abce3465857d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--21f7a2d5-b319-5539-972a-7c3be72d6568", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--770ace8b-82f5-509a-86c4-b204e1321fd9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='vun5plmaxydremk.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d0473ac-a953-53bd-ba7f-315d2dcb30e7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--770ace8b-82f5-509a-86c4-b204e1321fd9", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fb7c9ea8-3766-5cde-8ae7-06f23b2264a2", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='vvri8ocl4t3k8n6.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c69cab2-5a70-5050-bfda-e3ca39409924", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--fb7c9ea8-3766-5cde-8ae7-06f23b2264a2", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e2f9f1d3-c58d-52ff-a77f-08ef48313684", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='wlf6n6bml3ng89q.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a777e77a-f6d3-5667-8356-a523ea452f93", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e2f9f1d3-c58d-52ff-a77f-08ef48313684", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--33da9bb6-d566-5a23-9264-39d37a33db21", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='x6kcdjgagpl05z9.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--708e7094-fc7a-5207-b292-ab16bcb70af5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--33da9bb6-d566-5a23-9264-39d37a33db21", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7e12e994-204d-5445-8fe2-ccae4e4d3e10", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xc824fji4wkhib2.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29952498-2168-5e9e-8322-89aae92e05aa", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7e12e994-204d-5445-8fe2-ccae4e4d3e10", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ce054e11-3a0a-5574-8502-ef5d3faeb462", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xfal48cf0ies7ew.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3c18dad-1a16-5873-a071-4a3660169bba", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ce054e11-3a0a-5574-8502-ef5d3faeb462", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6e95ceaa-f2d8-51d8-8886-2019e7af1339", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xittgveqaufogve.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f82d4c14-444e-5413-80a2-dad530349314", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--6e95ceaa-f2d8-51d8-8886-2019e7af1339", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--82afd16c-50bf-5a36-a33f-3c15ba44fde0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xjslbdt9jdijn15.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfa5a137-87dd-55be-b6aa-158405e5b12a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--82afd16c-50bf-5a36-a33f-3c15ba44fde0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--72078f6a-0d2e-5511-9df8-796f7016fa93", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xlvmfod3upi2ic5.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8339bfe-f870-59b3-a6a4-0367deeea96b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--72078f6a-0d2e-5511-9df8-796f7016fa93", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f797ba96-fb6b-57f9-992d-5dc53cf70d6e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xmmfrkq9oat1daq.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2587aab2-4ac9-511e-a3f4-d2cc7584cd09", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f797ba96-fb6b-57f9-992d-5dc53cf70d6e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9da26cd2-34c1-5ece-a1c2-04bccc98fa91", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='xr5n4fl9rt5lxsd.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e0d0264-ebe6-5089-bd66-23ce4f81bbef", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--9da26cd2-34c1-5ece-a1c2-04bccc98fa91", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--37fa07ac-a2c4-50a6-aa8d-662a813eaf47", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='y4w.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f5da8d9-4f8a-59a2-83fc-c6105fad5662", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--37fa07ac-a2c4-50a6-aa8d-662a813eaf47", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--70dc88f9-28be-5c07-9db9-334309e21d13", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='yoe31t9k75av6qp.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12ec5228-6b91-5898-85db-b8c4300115b5", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--70dc88f9-28be-5c07-9db9-334309e21d13", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--31d71ae8-0362-551d-aa59-632c7185fda0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='yva538ay3mz7008.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0358a0b-1da5-5f50-a44f-943c77a15296", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--31d71ae8-0362-551d-aa59-632c7185fda0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--768c577b-c973-5efd-97f4-ffd0abc7fd5c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='yve6eagcq7wcokf.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97ef8525-385c-5059-b6d7-80bf80cb4b4b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--768c577b-c973-5efd-97f4-ffd0abc7fd5c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--debe4cc9-22ec-53b8-bf3f-a4bedfe92f29", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='yvgy29glwf72qnl.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e537d203-1dc8-5ace-8819-6ea07f6455e7", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--debe4cc9-22ec-53b8-bf3f-a4bedfe92f29", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8db98cbb-1fda-588b-9cc5-6d5f3c671c69", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='z2c4fbfnp1pm68b.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70cd2f8a-c160-515d-82b7-0a504ab3ccdd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8db98cbb-1fda-588b-9cc5-6d5f3c671c69", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c0d579ad-4436-518e-b2c5-3c183afeb051", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='zcjdlb5ubkhy41u.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5515d9aa-12d3-5aff-be60-5b59f7b9b249", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c0d579ad-4436-518e-b2c5-3c183afeb051", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8078a296-758d-5811-85d7-587916f12c18", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='znjf3yk1x4yyht7.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd8ba47b-af9e-54e0-a67e-519da5c4ada1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8078a296-758d-5811-85d7-587916f12c18", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--157bb530-eb4c-52ed-ae0c-2b005cc18a27", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='ztvnhmhm4zj95w3.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8b54e10-9eae-590c-b13c-6efc3eb4a19e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--157bb530-eb4c-52ed-ae0c-2b005cc18a27", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2c7af184-b9f7-5f45-8a85-b1d996027acf", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='.com.apple.mobileassetd.cache']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96993b7e-85a3-5526-9be5-27b33886941c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--2c7af184-b9f7-5f45-8a85-b1d996027acf", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1e9505b7-a0a9-59b9-ac62-b76ab17755a9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='.com.apple.notes.cache.plist']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86ca45c6-3e7e-5b75-9718-a60745446d4e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1e9505b7-a0a9-59b9-ac62-b76ab17755a9", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ff5ee27-c14a-5d23-b38b-eb4df7619930", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='blob_d6c1a21adb11f0ea023b9a35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--933e1eda-5753-52f4-b684-358143920256", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8ff5ee27-c14a-5d23-b38b-eb4df7619930", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--99dea9e1-0a59-551c-a5e9-da57e467bb1a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='com.apple.photolibraryd.plist']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c4b5e46-d3ee-5ac8-8524-e6de69a55eb4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--99dea9e1-0a59-551c-a5e9-da57e467bb1a", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f5f0830e-1d66-5376-b418-f6fd65b40ebc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='fsCachedData0E1A3DC1C51C2D879DE016E56D3EECE8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28585ff9-0edf-5b50-a450-649cafb91743", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f5f0830e-1d66-5376-b418-f6fd65b40ebc", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--98c9df51-74ef-5e9a-93a8-cb28b9d34d09", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='pl.core.lock']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a90f2ec-13c6-5fb0-91b3-40e92c54e965", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--98c9df51-74ef-5e9a-93a8-cb28b9d34d09", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--56641bb1-9798-5f11-b841-4be51f5a6f89", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:name='pl.sp.exec.guard.lock']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e91b40ad-df74-5a37-9ec5-8834a77b2ad6", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--56641bb1-9798-5f11-b841-4be51f5a6f89", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1ce6f3c5-9858-506d-8e32-903bf1e0ddce", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/mobile/Library/Caches/.com.apple.mobileassetd.cache']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36a31471-99cb-509a-9945-28c0ae383520", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1ce6f3c5-9858-506d-8e32-903bf1e0ddce", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--aa47fd2f-83ed-5cf2-b7a6-a43a65b39a31", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/mobile/Library/Caches/.com.apple.notes.cache.plist']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a68dfc6f-a6c7-5317-9b3f-0181e73bac5e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--aa47fd2f-83ed-5cf2-b7a6-a43a65b39a31", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--291b8155-200a-5ead-a522-fee580149218", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/mobile/Library/Preferences/com.apple.photolibraryd.plist']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8330f54d-819b-55f5-b4c3-23a593623e8c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--291b8155-200a-5ead-a522-fee580149218", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d6669f16-5d2a-5d74-aca8-f0e8831afa04", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/root/Library/Caches/com.apple.WebKit.WebContent/blob_d6c1a21adb11f0ea023b9a35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81e54276-76a2-5e45-830a-24ec556dcb5d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--d6669f16-5d2a-5d74-aca8-f0e8831afa04", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--38af4134-94c9-522d-9290-a8eeacce620f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/root/Library/Caches/com.apple.nsurlsessiond/fsCachedData0E1A3DC1C51C2D879DE016E56D3EECE8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--408e00ea-b1cd-5f48-b4cf-bbabdd6152dd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--38af4134-94c9-522d-9290-a8eeacce620f", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2ed7ea21-dda4-5d88-9cc2-028f21f8f696", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/tmp/pl.core.lock']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff950d8c-9c0b-5720-a79f-882270d10527", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--2ed7ea21-dda4-5d88-9cc2-028f21f8f696", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--20dbcb81-fb59-5c19-9faf-be989d04017d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/tmp/pl.sp.exec.guard.lock']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb030f87-a904-5ba0-8244-ef3e626bc735", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--20dbcb81-fb59-5c19-9faf-be989d04017d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--73d14cc1-4ff3-5b4a-9f84-26d550c1614b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/tmp/relaunch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95723624-db7b-57cf-86f4-28db77ba065a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--73d14cc1-4ff3-5b4a-9f84-26d550c1614b", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--85e35151-1c52-5bca-9585-602ed910b5af", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/tmp/stop']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df386e69-3ce5-5cae-8a63-058f2458c372", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--85e35151-1c52-5bca-9585-602ed910b5af", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--028da63b-1723-552b-ad70-9e33bee6ea7f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/tmp/uninstall']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98ac7d6d-cc75-5a04-8f16-75c973e0d029", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--028da63b-1723-552b-ad70-9e33bee6ea7f", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--aa1d1ad8-18be-5b23-ad89-9e3c85e34b1c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:path='/private/var/tmp/upgrade.dylib']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41bbb545-a748-52e5-a4c5-274e2e9fddc9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--aa1d1ad8-18be-5b23-ad89-9e3c85e34b1c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2b697867-2a93-5fe0-acf1-b56e4afab772", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='023e5fb71923cfa2088b9a48ad8566ff7ac92a99630add0629a5edf4679888de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b7b0378-2382-5baf-b672-523ebfb4d16c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--2b697867-2a93-5fe0-acf1-b56e4afab772", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e10c7faf-0156-579b-89f4-07b22d747780", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='05b5e4070b3b8a130b12ea96c5526b4615fcae121bb802b1a10c3a7a70f39901']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5ff4c49-6e56-5aed-94d8-71879dbae9a9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e10c7faf-0156-579b-89f4-07b22d747780", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f0b49875-e1f1-5a54-a6ad-20fa5f84567c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='0dff17e3aa12c4928273c70a2e0a6fff25d3e43c0d1b71056abad34a22b03495']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f5a6609-07ab-582a-8e88-a43dbc6caacb", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f0b49875-e1f1-5a54-a6ad-20fa5f84567c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4153caa1-c70e-527f-bd24-edf05b082b39", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='10bd8f2f8bb9595664bb9160fbc4136f1d796cb5705c551f7ab8b9b1e658085c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12bc4ee0-42fe-5252-b062-4582d65def8d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--4153caa1-c70e-527f-bd24-edf05b082b39", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a6770483-ba13-5e9e-995d-5df67aad3b11", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='18394fcc096344e0730e49a0098970b1c53c137f679cff5c7ff8902e651cd8a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--764dc71f-25db-5e87-9d09-fddae31a5b63", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a6770483-ba13-5e9e-995d-5df67aad3b11", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57910b48-3e0f-502c-96b9-d7f83cdc1222", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='1fb9dedf1de81d387eff4bd5e747f730dd03c440157a66f20fdb5e95f64318c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f7e2c73-8c53-512b-9596-942552e183b8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--57910b48-3e0f-502c-96b9-d7f83cdc1222", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f7c55b02-9b5d-5189-a50e-01bf84d83f30", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='25a9b004cf61fb251c8d4024a8c7383a86cb30f60aa7d59ca53ce9460fcfb7de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78e6145f-8e4c-5e61-8a48-c29233108b1e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--f7c55b02-9b5d-5189-a50e-01bf84d83f30", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b69a62d0-a9a8-5410-8a17-e37f113dc6dc", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='2a9d21ca07244932939c6c58699448f2147992c1f49cd3bc7d067bd92cb54f3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06e7f605-e3c6-57dd-b6cf-f0d805df2f08", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--b69a62d0-a9a8-5410-8a17-e37f113dc6dc", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--62c2cfcd-e067-541b-b338-67455b0f2c52", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='3c297829353778857edfeaed3ceeeca1bf8b60534f1979f7d442a0b03c56e541']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67b18e40-12ac-5709-9727-d3d5fdef513b", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--62c2cfcd-e067-541b-b338-67455b0f2c52", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e7cd0101-385b-50eb-9932-cce1afad94a8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='42cc02cecd65f22a3658354c5a5efa6a6ec3d716c7fbbcd12df1d1b077d2591b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0be5654f-9bc7-50de-b176-ee9ada8e6fd8", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--e7cd0101-385b-50eb-9932-cce1afad94a8", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--de5c3a7d-4b00-5c04-93d0-84fe354a7f9e", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='499f6b1e012d9bc947eea8e23635dfe6464cd7c9d99eb11d5874bd7b613297b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aea9bc5c-4ba3-599c-b2c2-a28b05a53dd4", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--de5c3a7d-4b00-5c04-93d0-84fe354a7f9e", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dea3047f-926e-5802-8134-77ad74db0ed0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='4dc255504a6c3ea8714ccdc95cc04138dc6c92130887274c8582b4a96ebab4a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5f59258-7599-5df3-b2bc-ba39977e9667", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--dea3047f-926e-5802-8134-77ad74db0ed0", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--45fb927f-29f8-5685-bf89-a0c7e658cc19", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='4dfcf5a71e5a8f27f748ac7fd7760dec0099ce338722215b4a5862b60c5b2bfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4d2a7b0-45cb-5fec-a567-7392db022ae0", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--45fb927f-29f8-5685-bf89-a0c7e658cc19", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f2663b4-d51a-5d7c-ab6e-8daad77e9d7a", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='6eafd742f58db21fbaf5fd7636e6653446df04b4a5c9bca9104e5dfad34f547c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43801564-d734-53a3-a37d-c1c21844f9a1", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7f2663b4-d51a-5d7c-ab6e-8daad77e9d7a", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3f3a46d2-6a5e-5219-912e-2d3724def487", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='721b46b43b7084b98e51ab00606f08a6ccd30b23bef5e542088f0b5706a8f780']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0716c85f-6d44-56ae-97e1-f57d362bb154", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--3f3a46d2-6a5e-5219-912e-2d3724def487", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1f4faba0-ac56-520e-9a74-c17b5a134b34", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='91d44c1f62fd863556aac0190cbef3b46abc4cbe880f80c580a1d258f0484c30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6df24a7-fda6-5a7f-9441-26bcd0cdc635", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1f4faba0-ac56-520e-9a74-c17b5a134b34", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1546402c-a8f4-57d7-b42c-a28558167f0c", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='be28b40df919d3fa87ed49e51135a719bd0616c9ac346ea5f20095cb78031ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c472bfd4-432a-58ca-b847-303178c06c62", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--1546402c-a8f4-57d7-b42c-a28558167f0c", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--96de09eb-37c8-53a7-987a-e427f90165d9", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='d371e3bed18ee355438b166bbf3bdaf2e7c6a3af8931181b9649020553b07e7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c5ea83b-ecb0-584b-91c1-165014a1f09f", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--96de09eb-37c8-53a7-987a-e427f90165d9", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d3a63f7e-379e-593d-9b12-1f502d59d72d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='d517c3868c5e7808202f53fa78d827a308d94500ae9051db0a62e11f7852e802']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1a446f4-9d2d-53d8-ae3d-8b01166d3022", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--d3a63f7e-379e-593d-9b12-1f502d59d72d", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--32fdcd8e-e553-58ae-9317-93b1a76403cd", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[file:hashes.sha256='f218068ea943a511b230f2a99991f6d1fbc2ac0aec7c796b261e2a26744929ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-03-03T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a73603d-5777-5f6d-84b6-b9e40c8dfc4d", "created": "2026-03-03T00:00:00.000Z", "modified": "2026-03-03T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--32fdcd8e-e553-58ae-9317-93b1a76403cd", "target_ref": "malware--04bf6518-2d79-58a8-8d45-103870452afa" } ] }